I booted into recovery (by holding the reset button for a count of 5 while powering on) and then ssh'd to the recovery system and sysupgrade'd (which writes to the fit ubi volume) to the installer.

Normaly i enter recovery by "echo c > /proc/sysrq-trigger" which is much faster than hold reset, which tries TFTP for a long time:

reset button found
button pushed, resetting environment
*** Warning - bad CRC, using default environment

Net:
Error: ethernet@1b100000 address not set.
No ethernet found.

No EFI system partition
No EFI system partition
Failed to persist EFI variables

Error: ethernet@1b100000 address not set.

Error: ethernet@1b100000 address not set.
Reading 131072 byte(s) (64 page(s)) at offset 0x00220000
UBI partition 'ubi' already selected
Saving Environment to UBI... UBI partition 'ubi' already selected
Writing to UBI... done
OK
Saving Environment to UBI... UBI partition 'ubi' already selected
Writing to UBI... done
OK
on

Error: ethernet@1b100000 address ff:ff:ff:ff:ff:ff illegal value
Using ethernet@1b100000 device
TFTP from server 192.168.1.254; our IP address is 192.168.1.1
Filename 'openwrt-mediatek-mt7622-linksys_e8450-ubi-initramfs-recovery.itb'.
Load address: 0x48000000
Loading: T T T T T T T T T T
Retry count exceeded; starting again
Wrong Image Format for bootm command
ERROR: can't get kernel image!
No size specified -> Using max size (8380416)
Read 8380416 bytes from volume recovery to 0000000048000000

Recovery is OpenWrt 22.03.3 r20028-43d71ad93e - Kernel 5.10.161, accessibly by ssh and http

Now i put https://github.com/dangowrt/owrt-ubi-installer/releases/download/v1.1.3/openwrt-mediatek-mt7622-linksys_e8450-ubi-initramfs-recovery-installer.itb to /tmp and then sysupgrade -v -n -F openwrt-mediatek-mt7622-linksys_e8450-ubi-initramfs-recovery-installer.itb

And again: no network (ping etc)! I have again to recover by serial :frowning: By serial, ifconfig shows only "lo", nothing else.
Seems im to silly to "rerun the installer"

The log of using sysupgrad in recovery:

Watchdog handover: fd=3
- watchdog -
Watchdog does not have CARDRESET support
Mon Mar 27 22:42:02 UTC 2023 upgrade: Sending TERM to remaining processes ...
Mon Mar 27 22:42:07 UTC 2023 upgrade: Sending KILL to remaining processes ...
[  647.278875] stage2 (3092): drop_caches: 3
Mon Mar 27 22:42:13 UTC 2023 upgrade: Switching to ramdisk...
Mon Mar 27 22:42:13 UTC 2023 upgrade: Performing system upgrade...
removing ubiblock0_3
[  648.754934] block ubiblock0_3: released
Volume ID 3, size 118 LEBs (14983168 bytes, 14.2 MiB), LEB size 126976 bytes (124.0 KiB), dynamic, name "fit", alignment 1
Set volume size to 98279424
Volume ID 4, size 774 LEBs (98279424 bytes, 93.7 MiB), LEB size 126976 bytes (124.0 KiB), dynamic, name "rootfs_data", alignment 1
sysupgrade successful
umount: can't unmount /dev: Resource busy
umount: can't unmount /tmp: Resource busy
[  651.902936] reboot: Restarting system

F0: 102B 0000
F6: 0000 0000
V0: 0000 0000 [0001]
00: 0000 0000
BP: 0400 0041 [0000]
G0: 1190 0000
T0: 0000 02D3 [000F]
Jump to BL

NOTICE:  BL2: v2.9(release):OpenWrt v2023-07-24-00ac6db3-2 (mt7622-snand-1ddr)
NOTICE:  BL2: Built : 22:14:18, Jul 15 2024
NOTICE:  CPU: MT7622
NOTICE:  WDT: [40000000] Software reset (reboot)
NOTICE:  SPI-NAND: FM35Q1GA (128MB)
NOTICE:  BL2: Booting BL31
NOTICE:  BL31: v2.9(release):OpenWrt v2023-07-24-00ac6db3-2 (mt7622-snand-1ddr)
NOTICE:  BL31: Built : 22:14:18, Jul 15 2024


U-Boot 2023.07.02-OpenWrt-r24012-d8dd03c46f (Jul 15 2024 - 22:14:18 +0000)

CPU:   MediaTek MT7622
Model: mt7622-linksys-e8450-ubi
DRAM:  512 MiB
Core:  48 devices, 21 uclasses, devicetree: separate
MMC:
Loading Environment from UBI... SPI-NAND: FM35Q1GA (128MB)
ubi0 warning: print_rsvd_warning: cannot reserve enough PEBs for bad PEB handling, reserved 17, need 19
Read 126976 bytes from volume ubootenv to 000000005f7bf200
Read 126976 bytes from volume ubootenv2 to 000000005f7de240
OK
In:    serial@11002000
Out:   serial@11002000
Err:   serial@11002000
reset button found
Loading Environment from UBI... UBI partition 'ubi' already selected
Read 126976 bytes from volume ubootenv to 000000005f7bf200
Read 126976 bytes from volume ubootenv2 to 000000005f7de240
OK
Net:
Error: ethernet@1b100000 address ff:ff:ff:ff:ff:ff illegal value
eth0: ethernet@1b100000
Error: ethernet@1b100000 address ff:ff:ff:ff:ff:ff illegal value

No EFI system partition
No EFI system partition
Failed to persist EFI variables

        ( ( ( OpenWrt ) ) )       U-Boot 2023.07.02-OpenWrt-r24012-d8dd03c46f (Jul 15 2024 - 22:14:18 +0000)

      1. Run default boot command.
      2. Boot system via TFTP.
      3. Boot production system from flash.
      4. Boot recovery system from flash.
      5. Load production system via TFTP then write to flash.
      6. Load recovery system via TFTP then write to flash.
      7. Load BL31+U-Boot FIP via TFTP then write to flash.
      8. Load BL2 preloader via TFTP then write to flash.
      9. Reboot.
      a. Reset all settings to factory defaults.
      0. U-Boot console


  Press UP/DOWN to move, ENTER to select, ESC to quit
UBI partition 'ubi' already selected
No size specified -> Using max size (14983168)
Read 14983168 bytes from volume fit to 0000000048000000

## Checking Image at 48000000 ...
   FIT image found
   FIT description: ARM64 OpenWrt FIT (Flattened Image Tree)
    Image 0 (kernel-1)
     Description:  ARM64 OpenWrt Linux-6.6.45
     Type:         Kernel Image
     Compression:  lzma compressed
     Data Start:   0x480000fc
     Data Size:    4327076 Bytes = 4.1 MiB
     Architecture: AArch64
     OS:           Linux
     Load Address: 0x44000000
     Entry Point:  0x44000000
     Hash algo:    crc32
     Hash value:   212dd8a0
     Hash algo:    sha1
     Hash value:   fc1cc1ac0fb86d7a9086da40b300ece1b699ddf4
    Image 1 (initrd-1)
     Description:  ARM64 OpenWrt linksys_e8450-ubi initrd
     Type:         RAMDisk Image
     Compression:  uncompressed
     Data Start:   0x484208dc
     Data Size:    10578080 Bytes = 10.1 MiB
     Architecture: AArch64
     OS:           Linux
     Load Address: unavailable
     Entry Point:  unavailable
     Hash algo:    crc32
     Hash value:   10fda29c
     Hash algo:    sha1
     Hash value:   97a7c23b9f44412d5cbc074de9a3b5e4af4e1abc
    Image 2 (fdt-1)
     Description:  ARM64 OpenWrt linksys_e8450-ubi device tree blob
     Type:         Flat Device Tree
     Compression:  uncompressed
     Data Start:   0x48e3728c
     Data Size:    31507 Bytes = 30.8 KiB
     Architecture: AArch64
     Hash algo:    crc32
     Hash value:   26f862fe
     Hash algo:    sha1
     Hash value:   598b874eb0c650756d2037571ba19d8fa874f1d9
    Default Configuration: 'config-1'
    Configuration 0 (config-1)
     Description:  OpenWrt linksys_e8450-ubi
     Kernel:       kernel-1
     Init Ramdisk: initrd-1
     FDT:          fdt-1
## Checking hash(es) for FIT Image at 48000000 ...
   Hash(es) for Image 0 (kernel-1): crc32+ sha1+
   Hash(es) for Image 1 (initrd-1): crc32+ sha1+
   Hash(es) for Image 2 (fdt-1): crc32+ sha1+
## Loading kernel from FIT Image at 48000000 ...
   Using 'config-1' configuration
   Trying 'kernel-1' kernel subimage
     Description:  ARM64 OpenWrt Linux-6.6.45
     Type:         Kernel Image
     Compression:  lzma compressed
     Data Start:   0x480000fc
     Data Size:    4327076 Bytes = 4.1 MiB
     Architecture: AArch64
     OS:           Linux
     Load Address: 0x44000000
     Entry Point:  0x44000000
     Hash algo:    crc32
     Hash value:   212dd8a0
     Hash algo:    sha1
     Hash value:   fc1cc1ac0fb86d7a9086da40b300ece1b699ddf4
   Verifying Hash Integrity ... crc32+ sha1+ OK
## Loading ramdisk from FIT Image at 48000000 ...
   Using 'config-1' configuration
   Trying 'initrd-1' ramdisk subimage
     Description:  ARM64 OpenWrt linksys_e8450-ubi initrd
     Type:         RAMDisk Image
     Compression:  uncompressed
     Data Start:   0x484208dc
     Data Size:    10578080 Bytes = 10.1 MiB
     Architecture: AArch64
     OS:           Linux
     Load Address: unavailable
     Entry Point:  unavailable
     Hash algo:    crc32
     Hash value:   10fda29c
     Hash algo:    sha1
     Hash value:   97a7c23b9f44412d5cbc074de9a3b5e4af4e1abc
   Verifying Hash Integrity ... crc32+ sha1+ OK
## Loading fdt from FIT Image at 48000000 ...
   Using 'config-1' configuration
   Trying 'fdt-1' fdt subimage
     Description:  ARM64 OpenWrt linksys_e8450-ubi device tree blob
     Type:         Flat Device Tree
     Compression:  uncompressed
     Data Start:   0x48e3728c
     Data Size:    31507 Bytes = 30.8 KiB
     Architecture: AArch64
     Hash algo:    crc32
     Hash value:   26f862fe
     Hash algo:    sha1
     Hash value:   598b874eb0c650756d2037571ba19d8fa874f1d9
   Verifying Hash Integrity ... crc32+ sha1+ OK
   Booting using the fdt blob at 0x48e3728c
Working FDT set to 48e3728c
   Uncompressing Kernel Image
   Loading Ramdisk to 5ddd4000, end 5e7ea8a0 ... OK
   Loading Device Tree to 000000005ddc9000, end 000000005ddd3b12 ... OK
Working FDT set to 5ddc9000
Add 'ramoops@42ff0000' node failed: FDT_ERR_EXISTS

Starting kernel ...

[    0.000000] Booting Linux on physical CPU 0x0000000000 [0x410fd034]
[    0.000000] Linux version 6.6.45 (builder@buildhost) (aarch64-openwrt-linux-musl-gcc (OpenWrt GCC 13.3.0 r27137-f51cb74473) 13.3.0, GNU ld (GNU Binutils) 2.42) #0 SMP Mon Aug 12 22:48:06 2024
[    0.000000] Machine model: Linksys E8450 (UBI)
[    0.000000] earlycon: uart8250 at MMIO32 0x0000000011002000 (options '')
[    0.000000] printk: bootconsole [uart8250] enabled
[    0.000000] OF: reserved mem: 0x0000000042ff0000..0x0000000042ffffff (64 KiB) map non-reusable ramoops@42ff0000
[    0.000000] OF: reserved mem: 0x0000000043000000..0x000000004302ffff (192 KiB) nomap non-reusable secmon@43000000
[    0.000000] Zone ranges:
[    0.000000]   DMA      [mem 0x0000000040000000-0x000000005fffffff]
[    0.000000]   DMA32    empty
[    0.000000]   Normal   empty
[    0.000000] Movable zone start for each node
[    0.000000] Early memory node ranges
[    0.000000]   node   0: [mem 0x0000000040000000-0x0000000042ffffff]
[    0.000000]   node   0: [mem 0x0000000043000000-0x000000004302ffff]
[    0.000000]   node   0: [mem 0x0000000043030000-0x000000005fffffff]
[    0.000000] Initmem setup node 0 [mem 0x0000000040000000-0x000000005fffffff]
[    0.000000] psci: probing for conduit method from DT.
[    0.000000] psci: PSCIv1.1 detected in firmware.
[    0.000000] psci: Using standard PSCI v0.2 function IDs
[    0.000000] psci: MIGRATE_INFO_TYPE not supported.
[    0.000000] psci: SMC Calling Convention v1.4
[    0.000000] percpu: Embedded 18 pages/cpu s35112 r8192 d30424 u73728
[    0.000000] pcpu-alloc: s35112 r8192 d30424 u73728 alloc=18*4096
[    0.000000] pcpu-alloc: [0] 0 [0] 1
[    0.000000] Detected VIPT I-cache on CPU0
[    0.000000] CPU features: kernel page table isolation disabled by kernel configuration
[    0.000000] CPU features: detected: ARM erratum 843419
[    0.000000] alternatives: applying boot alternatives
[    0.000000] Kernel command line: earlycon=uart8250,mmio32,0x11002000 console=ttyS0,115200n1 swiotlb=512 ubi.block=0,fit root=/dev/fit0 rootwait
[    0.000000] Dentry cache hash table entries: 65536 (order: 7, 524288 bytes, linear)
[    0.000000] Inode-cache hash table entries: 32768 (order: 6, 262144 bytes, linear)
[    0.000000] Built 1 zonelists, mobility grouping on.  Total pages: 129024
[    0.000000] mem auto-init: stack:off, heap alloc:off, heap free:off
[    0.000000] software IO TLB: area num 2.
[    0.000000] software IO TLB: mapped [mem 0x000000005f4c0000-0x000000005f5c0000] (1MB)
[    0.000000] Memory: 489004K/524288K available (8960K kernel code, 912K rwdata, 2572K rodata, 384K init, 309K bss, 35284K reserved, 0K cma-reserved)
[    0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1
[    0.000000] rcu: Hierarchical RCU implementation.
[    0.000000]  Tracing variant of Tasks RCU enabled.
[    0.000000] rcu: RCU calculated value of scheduler-enlistment delay is 10 jiffies.
[    0.000000] NR_IRQS: 64, nr_irqs: 64, preallocated irqs: 0
[    0.000000] Root IRQ handler: gic_handle_irq
[    0.000000] GIC: Using split EOI/Deactivate mode
[    0.000000] rcu: srcu_init: Setting srcu_struct sizes based on contention.
[    0.000000] arch_timer: cp15 timer(s) running at 12.50MHz (phys).
[    0.000000] clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x2e2049cda, max_idle_ns: 440795202628 ns
[    0.000000] sched_clock: 56 bits at 13MHz, resolution 80ns, wraps every 4398046511080ns
[    0.008286] Calibrating delay loop (skipped), value calculated using timer frequency.. 25.00 BogoMIPS (lpj=125000)
[    0.018686] pid_max: default: 32768 minimum: 301
[    0.026096] Mount-cache hash table entries: 1024 (order: 1, 8192 bytes, linear)
[    0.033444] Mountpoint-cache hash table entries: 1024 (order: 1, 8192 bytes, linear)
[    0.043925] RCU Tasks Trace: Setting shift to 1 and lim to 1 rcu_task_cb_adjust=1.
[    0.051675] rcu: Hierarchical SRCU implementation.
[    0.056501] rcu:     Max phase no-delay instances is 1000.
[    0.062248] smp: Bringing up secondary CPUs ...
[    0.067223] Detected VIPT I-cache on CPU1
[    0.067235] CPU features: SANITY CHECK: Unexpected variation in SYS_CNTFRQ_EL0. Boot CPU: 0x00000000bebc20, CPU1: 0x00000000000000
[    0.067256] CPU features: Unsupported CPU feature variation detected.
[    0.067322] CPU1: Booted secondary processor 0x0000000001 [0x410fd034]
[    0.067396] smp: Brought up 1 node, 2 CPUs
[    0.100332] SMP: Total of 2 processors activated.
[    0.105049] CPU features: detected: 32-bit EL0 Support
[    0.110204] CPU features: detected: CRC32 instructions
[    0.115389] CPU features: emulated: Privileged Access Never (PAN) using TTBR0_EL1 switching
[    0.123775] CPU: All CPU(s) started at EL2
[    0.127879] alternatives: applying system-wide alternatives
[    0.137870] clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604462750000 ns
[    0.147768] futex hash table entries: 512 (order: 3, 32768 bytes, linear)
[    0.155817] pinctrl core: initialized pinctrl subsystem
[    0.162291] NET: Registered PF_NETLINK/PF_ROUTE protocol family
[    0.168583] DMA: preallocated 128 KiB GFP_KERNEL pool for atomic allocations
[    0.175697] DMA: preallocated 128 KiB GFP_KERNEL|GFP_DMA pool for atomic allocations
[    0.183485] DMA: preallocated 128 KiB GFP_KERNEL|GFP_DMA32 pool for atomic allocations
[    0.191903] thermal_sys: Registered thermal governor 'fair_share'
[    0.191909] thermal_sys: Registered thermal governor 'bang_bang'
[    0.198021] thermal_sys: Registered thermal governor 'step_wise'
[    0.204062] thermal_sys: Registered thermal governor 'user_space'
[    0.210176] ASID allocator initialised with 65536 entries
[    0.222430] pstore: Using crash dump compression: deflate
[    0.227856] pstore: Registered ramoops as persistent store backend
[    0.234055] ramoops: using 0x10000@0x42ff0000, ecc: 0
[    0.249536] Modules: 29440 pages in range for non-PLT usage
[    0.249548] Modules: 520960 pages in range for PLT usage
[    0.256122] cryptd: max_cpu_qlen set to 1000
[    0.266915] SCSI subsystem initialized
[    0.270882] libata version 3.00 loaded.
[    0.276226] clocksource: Switched to clocksource arch_sys_counter
[    0.284609] NET: Registered PF_INET protocol family
[    0.289675] IP idents hash table entries: 8192 (order: 4, 65536 bytes, linear)
[    0.298410] tcp_listen_portaddr_hash hash table entries: 256 (order: 0, 4096 bytes, linear)
[    0.306818] Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear)
[    0.314594] TCP established hash table entries: 4096 (order: 3, 32768 bytes, linear)
[    0.322400] TCP bind hash table entries: 4096 (order: 5, 131072 bytes, linear)
[    0.329749] TCP: Hash tables configured (established 4096 bind 4096)
[    0.336238] UDP hash table entries: 256 (order: 1, 8192 bytes, linear)
[    0.342801] UDP-Lite hash table entries: 256 (order: 1, 8192 bytes, linear)
[    0.350084] NET: Registered PF_UNIX/PF_LOCAL protocol family
[    0.355800] PCI: CLS 0 bytes, default 64
[    0.359914] Unpacking initramfs...
[    0.367450] workingset: timestamp_bits=46 max_order=17 bucket_order=0
[    0.378683] squashfs: version 4.0 (2009/01/31) Phillip Lougher
[    0.384555] jffs2: version 2.2 (NAND) (SUMMARY) (LZMA) (RTIME) (CMODE_PRIORITY) (c) 2001-2006 Red Hat, Inc.
[    0.426452] Block layer SCSI generic (bsg) driver version 0.4 loaded (major 251)
[    0.435504] mt7622-pinctrl 10211000.pinctrl: invalid group "pwm_ch7_2" for function "pwm"
[    0.454493] mt-pmic-pwrap 10001000.pwrap: unexpected interrupt int=0x1
[    0.467949] Serial: 8250/16550 driver, 16 ports, IRQ sharing enabled
[    0.477611] printk: console [ttyS0] disabled
[    0.502396] 11002000.serial: ttyS0 at MMIO 0x11002000 (irq = 118, base_baud = 1562500) is a ST16650V2
[    0.511756] printk: console [ttyS0] enabled
[    0.511756] printk: console [ttyS0] enabled
[    0.520168] printk: bootconsole [uart8250] disabled
[    0.520168] printk: bootconsole [uart8250] disabled
[    0.551876] 11004000.serial: ttyS1 at MMIO 0x11004000 (irq = 119, base_baud = 1562500) is a ST16650V2
[    0.562390] mtk_rng 1020f000.rng: registered RNG driver
[    0.568110] random: crng init done
[    0.575501] loop: module loaded
[    0.579508] mtk-ecc 1100e000.ecc: probed
[    0.587045] spi-nand spi2.0: Fidelix SPI NAND was found.
[    0.592373] spi-nand spi2.0: 128 MiB, block size: 128 KiB, page size: 2048, OOB size: 64
[    0.600556] mtk-snand 1100d000.spi: ECC strength: 4 bits per 512 bytes
[    1.308446] Freeing initrd memory: 10328K
[    1.324991] 2 fixed-partitions partitions found on MTD device spi2.0
[    1.331399] Creating 2 MTD partitions on "spi2.0":
[    1.336186] 0x000000000000-0x000000080000 : "bl2"
[    1.341929] 0x000000080000-0x000008000000 : "ibu"
[    1.607977] i2c_dev: i2c /dev entries driver
[    1.613886] mtk-wdt 10212000.watchdog: Watchdog enabled (timeout=31 sec, nowayout=0)
[    1.624144] NET: Registered PF_INET6 protocol family
[    1.629873] Segment Routing with IPv6
[    1.633556] In-situ OAM (IOAM) with IPv6
[    1.637567] NET: Registered PF_PACKET protocol family
[    1.642651] bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this.
[    1.656043] 8021q: 802.1Q VLAN Support v1.8
[    1.687094] mtk-pcie 1a143000.pcie: host bridge /pcie@1a143000 ranges:
[    1.693647] mtk-pcie 1a143000.pcie: Parsing ranges property...
[    1.699503] mtk-pcie 1a143000.pcie:      MEM 0x0020000000..0x0027ffffff -> 0x0020000000
[    1.962992] mtk-pcie 1a143000.pcie: PCI host bridge to bus 0000:00
[    1.969223] pci_bus 0000:00: root bus resource [bus 00-ff]
[    1.974715] pci_bus 0000:00: root bus resource [mem 0x20000000-0x27ffffff]
[    1.981593] pci_bus 0000:00: scanning bus
[    1.985789] pci 0000:00:00.0: [14c3:3258] type 01 class 0x060400
[    1.991985] pci 0000:00:00.0: reg 0x10: [mem 0x00000000-0x1ffffffff 64bit pref]
[    2.002303] pci_bus 0000:00: fixups for bus
[    2.006543] pci 0000:00:00.0: scanning [bus 00-00] behind bridge, pass 0
[    2.013244] pci 0000:00:00.0: bridge configuration invalid ([bus 00-00]), reconfiguring
[    2.021323] pci 0000:00:00.0: scanning [bus 00-00] behind bridge, pass 1
[    2.028455] pci_bus 0000:01: scanning bus
[    2.032625] pci 0000:01:00.0: [14c3:7915] type 00 class 0x000280
[    2.038820] pci 0000:01:00.0: reg 0x10: [mem 0x00000000-0x000fffff 64bit pref]
[    2.046146] pci 0000:01:00.0: reg 0x18: [mem 0x00000000-0x00003fff 64bit pref]
[    2.053475] pci 0000:01:00.0: reg 0x20: [mem 0x00000000-0x00000fff 64bit pref]
[    2.061460] pci 0000:01:00.0: supports D1 D2
[    2.065724] pci 0000:01:00.0: PME# supported from D0 D1 D2 D3hot D3cold
[    2.072369] pci 0000:01:00.0: PME# disabled
[    2.076900] pci 0000:01:00.0: 2.000 Gb/s available PCIe bandwidth, limited by 2.5 GT/s PCIe x1 link at 0000:00:00.0 (capable of 4.000 Gb/s with 5.0 GT/s PCIe x1 link)
[    2.116502] pci_bus 0000:01: fixups for bus
[    2.120708] pci_bus 0000:01: bus scan returning with max=01
[    2.126308] pci_bus 0000:01: busn_res: [bus 01-ff] end is updated to 01
[    2.132937] pci_bus 0000:00: bus scan returning with max=01
[    2.138543] pci 0000:00:00.0: BAR 0: no space for [mem size 0x200000000 64bit pref]
[    2.146205] pci 0000:00:00.0: BAR 0: failed to assign [mem size 0x200000000 64bit pref]
[    2.154226] pci 0000:00:00.0: BAR 8: assigned [mem 0x20000000-0x201fffff]
[    2.161034] pci 0000:01:00.0: BAR 0: assigned [mem 0x20000000-0x200fffff 64bit pref]
[    2.168880] pci 0000:01:00.0: BAR 2: assigned [mem 0x20100000-0x20103fff 64bit pref]
[    2.176731] pci 0000:01:00.0: BAR 4: assigned [mem 0x20104000-0x20104fff 64bit pref]
[    2.184566] pci 0000:00:00.0: PCI bridge to [bus 01]
[    2.189548] pci 0000:00:00.0:   bridge window [mem 0x20000000-0x201fffff]
[    2.196594] pcieport 0000:00:00.0: assign IRQ: got 130
[    2.201749] pcieport 0000:00:00.0: enabling device (0000 -> 0002)
[    2.207883] pcieport 0000:00:00.0: enabling bus mastering
[    2.213379] mtk-pcie 1a143000.pcie: msi#0 address_hi 0x0 address_lo 0x44f2d0c0
[    2.220922] pcieport 0000:00:00.0: PME: Signaling with IRQ 130
[    2.226951] pcieport 0000:00:00.0: save config 0x00: 0x325814c3
[    2.232889] pcieport 0000:00:00.0: save config 0x04: 0x00100006
[    2.238837] pcieport 0000:00:00.0: save config 0x08: 0x06040000
[    2.244765] pcieport 0000:00:00.0: save config 0x0c: 0x00010000
[    2.250699] pcieport 0000:00:00.0: save config 0x10: 0x0000000c
[    2.256631] pcieport 0000:00:00.0: save config 0x14: 0x00000000
[    2.262553] pcieport 0000:00:00.0: save config 0x18: 0x40010100
[    2.268484] pcieport 0000:00:00.0: save config 0x1c: 0x04200000
[    2.274406] pcieport 0000:00:00.0: save config 0x20: 0x20102000
[    2.280337] pcieport 0000:00:00.0: save config 0x24: 0x00000000
[    2.286269] pcieport 0000:00:00.0: save config 0x28: 0x00000000
[    2.292192] pcieport 0000:00:00.0: save config 0x2c: 0x00000000
[    2.298139] pcieport 0000:00:00.0: save config 0x30: 0x00000000
[    2.304063] pcieport 0000:00:00.0: save config 0x34: 0x00000050
[    2.309994] pcieport 0000:00:00.0: save config 0x38: 0x00000000
[    2.315916] pcieport 0000:00:00.0: save config 0x3c: 0x00020182
[    2.322805] mtk-pcie 1a145000.pcie: host bridge /pcie@1a145000 ranges:
[    2.329402] mtk-pcie 1a145000.pcie: Parsing ranges property...
[    2.335252] mtk-pcie 1a145000.pcie:      MEM 0x0028000000..0x002fffffff -> 0x0028000000
[    2.676255] mtk-pcie 1a145000.pcie: Port1 link down
[    2.681362] mtk-pcie 1a145000.pcie: PCI host bridge to bus 0001:00
[    2.687571] pci_bus 0001:00: root bus resource [bus 00-ff]
[    2.693061] pci_bus 0001:00: root bus resource [mem 0x28000000-0x2fffffff]
[    2.699939] pci_bus 0001:00: scanning bus
[    2.705428] pci_bus 0001:00: fixups for bus
[    2.709614] pci_bus 0001:00: bus scan returning with max=00
[    2.716143] mtk_hsdma 1b007000.dma-controller: MediaTek HSDMA driver registered
[    2.978546] clk: Disabling unused clocks
[    2.983528] Freeing unused kernel memory: 384K
[    2.988210] Run /init as init process
[    2.991869]   with arguments:
[    2.994827]     /init
[    2.997104]   with environment:
[    3.000237]     HOME=/
[    3.002588]     TERM=linux
[    3.160977] init: Console is alive
[    3.164520] init: - watchdog -
[    3.171969] kmodloader: loading kernel modules from /etc/modules-boot.d/*
[    3.186069] usbcore: registered new interface driver usbfs
[    3.191679] usbcore: registered new interface driver hub
[    3.197128] usbcore: registered new device driver usb
[    3.202876] gpio_button_hotplug: loading out-of-tree module taints kernel.
[    3.217139] xhci-mtk 1a0c0000.usb: xHCI Host Controller
[    3.222399] xhci-mtk 1a0c0000.usb: new USB bus registered, assigned bus number 1
[    3.231506] xhci-mtk 1a0c0000.usb: hcc params 0x01403198 hci version 0x96 quirks 0x0000000000200010
[    3.240625] xhci-mtk 1a0c0000.usb: irq 133, io mem 0x1a0c0000
[    3.246484] xhci-mtk 1a0c0000.usb: xHCI Host Controller
[    3.251713] xhci-mtk 1a0c0000.usb: new USB bus registered, assigned bus number 2
[    3.259122] xhci-mtk 1a0c0000.usb: Host supports USB 3.0 SuperSpeed
[    3.265868] hub 1-0:1.0: USB hub found
[    3.269696] hub 1-0:1.0: 2 ports detected
[    3.274113] usb usb2: We don't know the algorithms for LPM for this host, disabling LPM.
[    3.282845] hub 2-0:1.0: USB hub found
[    3.286709] hub 2-0:1.0: 1 port detected
[    3.295617] kmodloader: done loading kernel modules from /etc/modules-boot.d/*
[    3.313018] init: - preinit -

OpenWrt UBI installer

preparing backup of relevant flash areas...
4+0 records in
4+0 records out
32+0 records in
32+0 records out
factory partition not found on raw flash offset
ip: SIOCGIFFLAGS: No such device
Press the [f] key and hit [enter] to enter failsafe mode
Press the [1], [2], [3] or [4] key and hit [enter] to select the debug level
[    7.037376] procd: - early -
[    7.040388] procd: - watchdog -
[    7.575379] procd: - watchdog -
[    7.578971] procd: - ubus -
[    7.634313] procd: - init -
Please press Enter to activate this console.
[    7.847082] kmodloader: loading kernel modules from /etc/modules.d/*
[    7.889174] PPP generic driver version 2.4.2
[    7.894153] NET: Registered PF_PPPOX protocol family
[    7.903267] kmodloader: done loading kernel modules from /etc/modules.d/*
[    8.050848] urngd: v1.0.2 started.
[   13.456456] platform fitblk: deferred probe pending
[   13.461345] platform 1b100000.ethernet: deferred probe pending




BusyBox v1.36.1 (2024-08-12 22:48:06 UTC) built-in shell (ash)

  _______                     ________        __
 |       |.-----.-----.-----.|  |  |  |.----.|  |_
 |   -   ||  _  |  -__|     ||  |  |  ||   _||   _|
 |_______||   __|_____|__|__||________||__|  |____|
          |__| W I R E L E S S   F R E E D O M
 -----------------------------------------------------
 OpenWrt SNAPSHOT, r27137-f51cb74473
 -----------------------------------------------------
=== WARNING! =====================================
There is no root password defined on this device!
Use the "passwd" command to set up a new password
in order to prevent unauthorized SSH logins.
--------------------------------------------------
root@OpenWrt:/# ifconfig
lo        Link encap:Local Loopback
          inet addr:127.0.0.1  Mask:255.0.0.0
          inet6 addr: ::1/128 Scope:Host
          UP LOOPBACK RUNNING  MTU:65536  Metric:1
          RX packets:256 errors:0 dropped:0 overruns:0 frame:0
          TX packets:256 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:19968 (19.5 KiB)  TX bytes:19968 (19.5 KiB)

Looks like the installer script [1] inside [2] is exiting at some point without fully formatting the NAND storage into FIP-in-UBI setup.

Can you please post the outputs of following commands

cat /proc/mtd

and

ubinfo -a

?

Based on the exit 1 and return 1 statements in the installer script [1], I think the script is unable to find the FACTORY data on the NAND device and hence exits. This can happen if the device is already formatted to FIP-in-UBI setup. EDIT: Just went through the Recovery log you attached. As I suspected, the script is exiting due to "factory partition not found on raw flash offset".

In my case, since I had already run the v1.1.0 installer in my RT3200's, I could not use the v1.1.3 installer to update BL2, FIP and RECOVERY. Hence I created my own custom installer script [3] based on the @daniel installer script [1] to update my RT3200.

NOTE: VERY IMPORTANT. Make sure you have a backup of FACTORY data before running either @daniel's installer [2] or my installer script [3].

In the pre FIP-in-UBI layout, FACTORY data is stored in mtd2 (entire partition). In FIP-in-UBI layout, FACTORY data is stored in ubi0_1 (entire UBI volume) inside mtd1 (partition).

[1] https://github.com/dangowrt/owrt-ubi-installer/blob/f0edbe54fd80ff7640a9311d2d8f6f1b52c6abf6/files/installer/install.sh

[2] https://github.com/dangowrt/owrt-ubi-installer/releases/download/v1.1.3/openwrt-mediatek-mt7622-linksys_e8450-ubi-initramfs-recovery-installer.itb

[3] Belkin RT3200/Linksys E8450 WiFi AX discussion - #5915 by ka2107

1 Like

Anyone know if this supports TRGMII? Would be a nice performance boost.

@ka2107 Thank you

# cat /proc/mtd
dev:    size   erasesize  name
mtd0: 00080000 00020000 "bl2"
mtd1: 00140000 00020000 "fip"
mtd2: 00100000 00020000 "factory"
mtd3: 07d00000 00020000 "ubi"
ubinfo -a 2>&1 |grep -E "^(N|C)"
Count of UBI devices:           1
Count of bad physical eraseblocks:       1
Count of reserved physical eraseblocks:  19
Current maximum erase counter value:     6
Character device major/minor:            249:0
Name:        ubootenv
Character device major/minor: 249:1
Name:        ubootenv2
Character device major/minor: 249:2
Name:        recovery
Character device major/minor: 249:3
Name:        fit
Character device major/minor: 249:4
Name:        rootfs_data
Character device major/minor: 249:5

Seems i'm missing " boot_backup" too :frowning:

I have a 3 year old archive file called "ubi0_3--boot_backup" with 3
files:
mtd0 512kb (Mediatek bootloader)
mtd1 1280kb (/sys/fs/pstore)
mtd2 1024 kb (no strings/binwalk results)

is the file mtd2 the factory.bin for the script?

Am i right to execute the script in "recovery"? Because of "kmod-mtd-rw_6.6.47..." i dont think its the 1.1.3 recovery..
But how should it upload the files with such a new kernel? I dont have network connectivity with it ^^

This is pre FIP-in-UBI layout (i.e. pre Installer v1.1.0 layout).

Yes, this is most likely your FACTORY data. My FACTORY dump is also 1 MiB. Just to be certain, check that your mtd2 looks something like below image (FACTORY dump from one of my RT3200) when opened using any HEX Viewer or Editor.

In the image, the 2.4 GHz WiFi MAC address of the RT3200 is E8:9F:80:E7:31:21 . You can see this MAC address directly as HEX bytes in the image.

I have built a initramfs-recovery.itb which includes kmod-mtd-rw. If you want to use my script in Belkin RT3200/Linksys E8450 WiFi AX discussion - #5915 by ka2107, you need to copy kmod-mtd-rw (my script assumes kmod-mtd-rw is not installed already), BL2 (preloader), BL31 (FIP), FACTORY (your mtd2 as /tmp/factory.bin), RECOVERY (initramfs-recovery.itb, NOT the installer.itb) to /tmp while booted inside iniramfs-recovery.itb and then run my script.

All the files are at https://www.dropbox.com/scl/fo/5tp96inie6jcjh3ruuy0c/ANxuYACy1WmgKMaUM8PqGNc?rlkey=808hmf8p8vdep3yqhrxlwkwxd&st=vgjblsr0&dl=0 .

kmod-mtd-rw inside kmods folder, copied to /tmp (no change in filename).
bl2 inside bl2_preloader_NAND folder, copied to /tmp (no change in filename).
bl31 (FIP) inside bl31_fip folder, copied to /tmp (no change in filename).
factory is your mtd2 dump copied to /tmp/factory.bin .
initramfs-recovery inside initramfs-recovery folder copied to /tmp (no change in filename).

My installer script is 2024-08-25_RT3200_FIP-in-UBI_formatter.sh. Copy it to /tmp and rename as you wish Make it executable (chmod +x) and then execute.

EDIT: Actually before you proceed, backup the CURRENT mtd2 (factory) from your device. Not sure if that contains the actual FACTORY data or not.

  1. Use sysupgrade to load the initramfs-recovery.itb (NOT the installer.itb).
  2. Once initramfs-recovery has booted, copy the files to /tmp using SCP.
  3. Copy the script to /tmp, make it executable and then execute the script.
  4. After the script completes execution and you confirm everything has been flashed successfully, reboot the device.
  5. After reboot, you should now be inside initramfs-recovery that was flashed to the NAND storage by the script.
  6. From inside the initramfs-recovery (flashed to NAND), copy the normal OpenWrt MAIN SNAPSHOT image to /tmp using SCP and sysupgrade normally.
  7. After reboot due to sysupgrade, now you should be inside normal OpenWrt SNAPSHOT image.

If i use a recovery with kernel 6.6 (installer 1.1.3) then is there no network interface except "lo"! (see logs above with updating recovery from recovery and final "ifconfig")
If i use a recovery (or normal openwrt) 23.05.4 then everything is okay!

mtd2/FACTORY: Mine looks same, first 0x400 = 1024dec bytes are used and then only FF. The numbers visible are the MACs?

imho the non-existent factory for "new" openwrt and then missing MAC causes missing network interfaces...

Maybe i should try to base64 encode and send by serial

Use sysupgrade to load the initramfs-recovery.itb (NOT the installer.itb).

result

root@OpenWrt:/# uname -a
Linux OpenWrt 5.15.162 #0 SMP Mon Jul 15 22:14:18 2024 aarch64 GNU/Linux
root@OpenWrt:/# Watchdog handover: fd=3
- watchdog -
Watchdog does not have CARDRESET support
Mon Aug 26 02:13:31 UTC 2024 upgrade: Sending TERM to remaining processes ...
Mon Aug 26 02:13:35 UTC 2024 upgrade: Sending KILL to remaining processes ...
[ 2103.241653] stage2 (2865): drop_caches: 3
Mon Aug 26 02:13:41 UTC 2024 upgrade: Switching to ramdisk...
[ 2104.535408] UBIFS (ubi0:4): background thread "ubifs_bgt0_4" stops
[ 2104.548414] UBIFS (ubi0:4): un-mount UBI device 0
Mon Aug 26 02:13:43 UTC 2024 upgrade: Performing system upgrade...
umount: can't unmount /dev/ubiblock0_3: Invalid argument
[ 2105.042788] block ubiblock0_3: released
Volume ID 3, size 69 LEBs (8761344 bytes, 8.3 MiB), LEB size 126976 bytes (124.0 KiB), dynamic, name "fit", alignment 1
Set volume size to 105009152
Volume ID 4, size 827 LEBs (105009152 bytes, 100.1 MiB), LEB size 126976 bytes (124.0 KiB), dynamic, name "rootfs_data", alignment 1
[ 2107.014075] UBIFS (ubi0:4): default file-system created
[ 2107.019657] UBIFS (ubi0:4): Mounting in unauthenticated mode
[ 2107.025520] UBIFS (ubi0:4): background thread "ubifs_bgt0_4" started, PID 3610
[ 2107.063409] UBIFS (ubi0:4): UBIFS: mounted UBI device 0, volume 4, name "rootfs_data"
[ 2107.071257] UBIFS (ubi0:4): LEB size: 126976 bytes (124 KiB), min./max. I/O unit sizes: 2048 bytes/2048 bytes
[ 2107.081220] UBIFS (ubi0:4): FS size: 103612416 bytes (98 MiB, 816 LEBs), max 827 LEBs, journal size 5206016 bytes (4 MiB, 41 LEBs)
[ 2107.092983] UBIFS (ubi0:4): reserved for root: 4893869 bytes (4779 KiB)
[ 2107.099595] UBIFS (ubi0:4): media format: w5/r0 (latest is w5/r0), UUID B1F7589C-9895-4AD7-8CEA-974A41868A37, small LPT model
[ 2107.121865] UBIFS (ubi0:4): un-mount UBI device 0
[ 2107.126611] UBIFS (ubi0:4): background thread "ubifs_bgt0_4" stops
configuration saved
sysupgrade successful
umount: can't unmount /dev: Resource busy
umount: can't unmount /tmp: Resource busy
[ 2107.173708] reboot: Restarting system

F0: 102B 0000
F6: 0000 0000
V0: 0000 0000 [0001]
00: 0000 0000
BP: 0400 0041 [0000]
G0: 1190 0000
T0: 0000 02D3 [000F]
Jump to BL

NOTICE:  BL2: v2.9(release):OpenWrt v2023-07-24-00ac6db3-2 (mt7622-snand-1ddr)
NOTICE:  BL2: Built : 22:14:18, Jul 15 2024
NOTICE:  CPU: MT7622
NOTICE:  WDT: [40000000] Software reset (reboot)
NOTICE:  SPI-NAND: FM35Q1GA (128MB)
NOTICE:  BL2: Booting BL31
NOTICE:  BL31: v2.9(release):OpenWrt v2023-07-24-00ac6db3-2 (mt7622-snand-1ddr)
NOTICE:  BL31: Built : 22:14:18, Jul 15 2024


U-Boot 2023.07.02-OpenWrt-r24012-d8dd03c46f (Jul 15 2024 - 22:14:18 +0000)

CPU:   MediaTek MT7622
Model: mt7622-linksys-e8450-ubi
DRAM:  512 MiB
Core:  48 devices, 21 uclasses, devicetree: separate
MMC:
Loading Environment from UBI... SPI-NAND: FM35Q1GA (128MB)
Read 126976 bytes from volume ubootenv to 000000005f7bf200
Read 126976 bytes from volume ubootenv2 to 000000005f7de240
OK
In:    serial@11002000
Out:   serial@11002000
Err:   serial@11002000
reset button found
Loading Environment from UBI... UBI partition 'ubi' already selected
Read 126976 bytes from volume ubootenv to 000000005f7bf200
Read 126976 bytes from volume ubootenv2 to 000000005f7de240
OK
Net:
Error: ethernet@1b100000 address ff:ff:ff:ff:ff:ff illegal value
eth0: ethernet@1b100000
Error: ethernet@1b100000 address ff:ff:ff:ff:ff:ff illegal value

No EFI system partition
No EFI system partition
Failed to persist EFI variables

        ( ( ( OpenWrt ) ) )       U-Boot 2023.07.02-OpenWrt-r24012-d8dd03c46f (Jul 15 2024 - 22:14:18 +0000)

      1. Run default boot command.
      2. Boot system via TFTP.
      3. Boot production system from flash.
      4. Boot recovery system from flash.
      5. Load production system via TFTP then write to flash.
      6. Load recovery system via TFTP then write to flash.
      7. Load BL31+U-Boot FIP via TFTP then write to flash.
      8. Load BL2 preloader via TFTP then write to flash.
      9. Reboot.
      a. Reset all settings to factory defaults.
      0. U-Boot console


  Press UP/DOWN to move, ENTER to select, ESC to quit
UBI partition 'ubi' already selected
No size specified -> Using max size (8761344)
Read 8761344 bytes from volume fit to 0000000048000000

## Checking Image at 48000000 ...
   FIT image found
   FIT description: ARM64 OpenWrt FIT (Flattened Image Tree)
    Image 0 (kernel-1)
     Description:  ARM64 OpenWrt Linux-6.6.47
     Type:         Kernel Image
     Compression:  lzma compressed
     Data Start:   0x480000e8
     Data Size:    4373178 Bytes = 4.2 MiB
     Architecture: AArch64
     OS:           Linux
     Load Address: 0x44000000
     Entry Point:  0x44000000
     Hash algo:    crc32
     Hash value:   11160bea
     Hash algo:    sha1
     Hash value:   dfc4c28d15860813f1b136f247190fd27d5e6743
    Image 1 (initrd-1)
     Description:  ARM64 OpenWrt linksys_e8450-ubi initrd
     Type:         RAMDisk Image
     Compression:  uncompressed
     Data Start:   0x4842bce0
     Data Size:    4234084 Bytes = 4 MiB
     Architecture: AArch64
     OS:           Linux
     Load Address: unavailable
     Entry Point:  unavailable
     Hash algo:    crc32
     Hash value:   42e6280c
     Hash algo:    sha1
     Hash value:   ab68aed64ef77251051226013e0509d827365566
    Image 2 (fdt-1)
     Description:  ARM64 OpenWrt linksys_e8450-ubi device tree blob
     Type:         Flat Device Tree
     Compression:  uncompressed
     Data Start:   0x48835954
     Data Size:    31553 Bytes = 30.8 KiB
     Architecture: AArch64
     Hash algo:    crc32
     Hash value:   96c645f4
     Hash algo:    sha1
     Hash value:   6dfe5855931ce4620c8593e5050d54386555cc87
    Default Configuration: 'config-1'
    Configuration 0 (config-1)
     Description:  OpenWrt linksys_e8450-ubi
     Kernel:       kernel-1
     Init Ramdisk: initrd-1
     FDT:          fdt-1
## Checking hash(es) for FIT Image at 48000000 ...
   Hash(es) for Image 0 (kernel-1): crc32+ sha1+
   Hash(es) for Image 1 (initrd-1): crc32+ sha1+
   Hash(es) for Image 2 (fdt-1): crc32+ sha1+
## Loading kernel from FIT Image at 48000000 ...
   Using 'config-1' configuration
   Trying 'kernel-1' kernel subimage
     Description:  ARM64 OpenWrt Linux-6.6.47
     Type:         Kernel Image
     Compression:  lzma compressed
     Data Start:   0x480000e8
     Data Size:    4373178 Bytes = 4.2 MiB
     Architecture: AArch64
     OS:           Linux
     Load Address: 0x44000000
     Entry Point:  0x44000000
     Hash algo:    crc32
     Hash value:   11160bea
     Hash algo:    sha1
     Hash value:   dfc4c28d15860813f1b136f247190fd27d5e6743
   Verifying Hash Integrity ... crc32+ sha1+ OK
## Loading ramdisk from FIT Image at 48000000 ...
   Using 'config-1' configuration
   Trying 'initrd-1' ramdisk subimage
     Description:  ARM64 OpenWrt linksys_e8450-ubi initrd
     Type:         RAMDisk Image
     Compression:  uncompressed
     Data Start:   0x4842bce0
     Data Size:    4234084 Bytes = 4 MiB
     Architecture: AArch64
     OS:           Linux
     Load Address: unavailable
     Entry Point:  unavailable
     Hash algo:    crc32
     Hash value:   42e6280c
     Hash algo:    sha1
     Hash value:   ab68aed64ef77251051226013e0509d827365566
   Verifying Hash Integrity ... crc32+ sha1+ OK
## Loading fdt from FIT Image at 48000000 ...
   Using 'config-1' configuration
   Trying 'fdt-1' fdt subimage
     Description:  ARM64 OpenWrt linksys_e8450-ubi device tree blob
     Type:         Flat Device Tree
     Compression:  uncompressed
     Data Start:   0x48835954
     Data Size:    31553 Bytes = 30.8 KiB
     Architecture: AArch64
     Hash algo:    crc32
     Hash value:   96c645f4
     Hash algo:    sha1
     Hash value:   6dfe5855931ce4620c8593e5050d54386555cc87
   Verifying Hash Integrity ... crc32+ sha1+ OK
   Booting using the fdt blob at 0x48835954
Working FDT set to 48835954
   Uncompressing Kernel Image
   Loading Ramdisk to 5e3e1000, end 5e7eab64 ... OK
   Loading Device Tree to 000000005e3d6000, end 000000005e3e0b40 ... OK
Working FDT set to 5e3d6000
Add 'ramoops@42ff0000' node failed: FDT_ERR_EXISTS

Starting kernel ...

[    0.000000] Booting Linux on physical CPU 0x0000000000 [0x410fd034]
[    0.000000] Linux version 6.6.47 (builder@buildhost) (aarch64-openwrt-linux-musl-gcc (OpenWrt GCC 13.3.0 r27218-1d976f83e4) 13.3.0, GNU ld (GNU Binutils) 2.42) #0 SMP Sat Aug 24 18:35:30 2024
[    0.000000] Machine model: Linksys E8450 (UBI)
[    0.000000] earlycon: uart8250 at MMIO32 0x0000000011002000 (options '')
[    0.000000] printk: bootconsole [uart8250] enabled
[    0.000000] OF: reserved mem: 0x0000000042ff0000..0x0000000042ffffff (64 KiB) map non-reusable ramoops@42ff0000
[    0.000000] OF: reserved mem: 0x0000000043000000..0x000000004302ffff (192 KiB) nomap non-reusable secmon@43000000
[    0.000000] Zone ranges:
[    0.000000]   DMA      [mem 0x0000000040000000-0x000000005fffffff]
[    0.000000]   DMA32    empty
[    0.000000]   Normal   empty
[    0.000000] Movable zone start for each node
[    0.000000] Early memory node ranges
[    0.000000]   node   0: [mem 0x0000000040000000-0x0000000042ffffff]
[    0.000000]   node   0: [mem 0x0000000043000000-0x000000004302ffff]
[    0.000000]   node   0: [mem 0x0000000043030000-0x000000005fffffff]
[    0.000000] Initmem setup node 0 [mem 0x0000000040000000-0x000000005fffffff]
[    0.000000] psci: probing for conduit method from DT.
[    0.000000] psci: PSCIv1.1 detected in firmware.
[    0.000000] psci: Using standard PSCI v0.2 function IDs
[    0.000000] psci: MIGRATE_INFO_TYPE not supported.
[    0.000000] psci: SMC Calling Convention v1.4
[    0.000000] percpu: Embedded 18 pages/cpu s35112 r8192 d30424 u73728
[    0.000000] pcpu-alloc: s35112 r8192 d30424 u73728 alloc=18*4096
[    0.000000] pcpu-alloc: [0] 0 [0] 1
[    0.000000] Detected VIPT I-cache on CPU0
[    0.000000] CPU features: kernel page table isolation disabled by kernel configuration
[    0.000000] CPU features: detected: ARM erratum 843419
[    0.000000] alternatives: applying boot alternatives
[    0.000000] Kernel command line: earlycon=uart8250,mmio32,0x11002000 console=ttyS0,115200n1 swiotlb=512 ubi.block=0,fit root=/dev/fit0 rootwait
[    0.000000] Dentry cache hash table entries: 65536 (order: 7, 524288 bytes, linear)
[    0.000000] Inode-cache hash table entries: 32768 (order: 6, 262144 bytes, linear)
[    0.000000] Built 1 zonelists, mobility grouping on.  Total pages: 129024
[    0.000000] mem auto-init: stack:off, heap alloc:off, heap free:off
[    0.000000] software IO TLB: area num 2.
[    0.000000] software IO TLB: mapped [mem 0x000000005f4c0000-0x000000005f5c0000] (1MB)
[    0.000000] Memory: 495072K/524288K available (9024K kernel code, 912K rwdata, 2576K rodata, 448K init, 309K bss, 29216K reserved, 0K cma-reserved)
[    0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1
[    0.000000] rcu: Hierarchical RCU implementation.
[    0.000000]  Tracing variant of Tasks RCU enabled.
[    0.000000] rcu: RCU calculated value of scheduler-enlistment delay iAR 0: failed to assign [mem size 0x200000000 64bit pref]
[    2.724782] pci 0000:00:00.0: BAR 8: assigned [mem 0x20000000-0x201fffff]
[    2.731590] pci 0000:01:00.0: BAR 0: assigned [mem 0x20000000-0x200fffff 64bit pref]
[    2.739437] pci 0000:01:00.0: BAR 2: assigned [mem 0x20100000-0x20103fff 64bit pref]
[    2.747290] pci 0000:01:00.0: BAR 4: assigned [mem 0x20104000-0x20104fff 64bit pref]
[    2.755125] pci 0000:00:00.0: PCI bridge to [bus 01]
[    2.760108] pci 0000:00:00.0:   bridge window [mem 0x20000000-0x201fffff]
[    2.767128] pcieport 0000:00:00.0: assign IRQ: got 130
[    2.772279] pcieport 0000:00:00.0: enabling device (0000 -> 0002)
[    2.778411] pcieport 0000:00:00.0: enabling bus mastering
[    2.783926] mtk-pcie 1a143000.pcie: msi#0 address_hi 0x0 address_lo 0x44f950c0
[    2.791475] pcieport 0000:00:00.0: PME: Signaling with IRQ 130
[    2.797509] pcieport 0000:00:00.0: save config 0x00: 0x325814c3
[    2.803445] pcieport 0000:00:00.0: save config 0x04: 0x00100006
[    2.809400] pcieport 0000:00:00.0: save config 0x08: 0x06040000
[    2.815326] pcieport 0000:00:00.0: save config 0x0c: 0x00010000
[    2.821262] pcieport 0000:00:00.0: save config 0x10: 0x0000000c
[    2.827194] pcieport 0000:00:00.0: save config 0x14: 0x00000000
[    2.833116] pcieport 0000:00:00.0: save config 0x18: 0x40010100
[    2.839047] pcieport 0000:00:00.0: save config 0x1c: 0x04200000
[    2.844969] pcieport 0000:00:00.0: save config 0x20: 0x20102000
[    2.850900] pcieport 0000:00:00.0: save config 0x24: 0x00000000
[    2.856832] pcieport 0000:00:00.0: save config 0x28: 0x00000000
[    2.862755] pcieport 0000:00:00.0: save config 0x2c: 0x00000000
[    2.868691] pcieport 0000:00:00.0: save config 0x30: 0x00000000
[    2.874614] pcieport 0000:00:00.0: save config 0x34: 0x00000050
[    2.880545] pcieport 0000:00:00.0: save config 0x38: 0x00000000
[    2.886467] pcieport 0000:00:00.0: save config 0x3c: 0x00020182
[    2.893221] mtk-pcie 1a145000.pcie: host bridge /pcie@1a145000 ranges:
[    2.899820] mtk-pcie 1a145000.pcie: Parsing ranges property...
[    2.905669] mtk-pcie 1a145000.pcie:      MEM 0x0028000000..0x002fffffff -> 0x0028000000
[    3.246840] mtk-pcie 1a145000.pcie: Port1 link down
[    3.252004] mtk-pcie 1a145000.pcie: PCI host bridge to bus 0001:00
[    3.258218] pci_bus 0001:00: root bus resource [bus 00-ff]
[    3.263707] pci_bus 0001:00: root bus resource [mem 0x28000000-0x2fffffff]
[    3.270584] pci_bus 0001:00: scanning bus
[    3.276154] pci_bus 0001:00: fixups for bus
[    3.280349] pci_bus 0001:00: bus scan returning with max=00
[    3.286930] mtk_hsdma 1b007000.dma-controller: MediaTek HSDMA driver registered
[    3.295075] fitblk: probe of fitblk failed with error -95
[    3.559105] clk: Disabling unused clocks
[    3.564175] Freeing unused kernel memory: 448K
[    3.568866] Run /init as init process
[    3.572529]   with arguments:
[    3.575487]     /init
[    3.577764]   with environment:
[    3.580896]     HOME=/
[    3.583247]     TERM=linux
[    3.745164] init: Console is alive
[    3.748841] init: - watchdog -
[    3.756784] kmodloader: loading kernel modules from /etc/modules-boot.d/*
[    3.770358] usbcore: registered new interface driver usbfs
[    3.775932] usbcore: registered new interface driver hub
[    3.781356] usbcore: registered new device driver usb
[    3.787544] gpio_button_hotplug: loading out-of-tree module taints kernel.
[    3.801429] xhci-mtk 1a0c0000.usb: xHCI Host Controller
[    3.806705] xhci-mtk 1a0c0000.usb: new USB bus registered, assigned bus number 1
[    3.815801] xhci-mtk 1a0c0000.usb: hcc params 0x01403198 hci version 0x96 quirks 0x0000000000200010
[    3.824946] xhci-mtk 1a0c0000.usb: irq 133, io mem 0x1a0c0000
[    3.830814] xhci-mtk 1a0c0000.usb: xHCI Host Controller
[    3.836042] xhci-mtk 1a0c0000.usb: new USB bus registered, assigned bus number 2
[    3.843447] xhci-mtk 1a0c0000.usb: Host supports USB 3.0 SuperSpeed
[    3.850210] hub 1-0:1.0: USB hub found
[    3.854014] hub 1-0:1.0: 2 ports detected
[    3.858567] usb usb2: We don't know the algorithms for LPM for this host, disabling LPM.
[    3.867214] hub 2-0:1.0: USB hub found
[    3.871028] hub 2-0:1.0: 1 port detected
[    3.880348] kmodloader: done loading kernel modules from /etc/modules-boot.d/*
[    3.897990] init: - preinit -
ip: SIOCGIFFLAGS: No such device
Press the [f] key and hit [enter] to enter failsafe mode
Press the [1], [2], [3] or [4] key and hit [enter] to select the debug level
[    6.277968] procd: - early -
[    6.280983] procd: - watchdog -
[    6.824933] procd: - watchdog -
[    6.828490] procd: - ubus -
[    6.884935] procd: - init -
Please press Enter to activate this console.
[    7.092791] kmodloader: loading kernel modules from /etc/modules.d/*
[    7.104080] Loading modules backported from Linux version v6.9.9-0-g28fdf4518483
[    7.111528] Backport generated by backports.git v6.1.97-1-29-gf1d24a3683b2
[    7.170313] mt7622-wmac 18000000.wmac: Invalid MAC address, using random address 7e:ff:b4:33:29:09
[    7.180744] mt7622-wmac 18000000.wmac: registering led 'mt76-phy0'
[    7.237269] ieee80211 phy0: Selected rate control algorithm 'minstrel_ht'
[    7.255382] mt7915e 0000:01:00.0: assign IRQ: got 130
[    7.260563] mt7915e 0000:01:00.0: enabling device (0000 -> 0002)
[    7.266658] mt7915e 0000:01:00.0: enabling bus mastering
[    7.274044] mt7622-wmac 18000000.wmac: HW/SW Version: 0x8a108a10, Build Time: 20190801210006a
[    7.274044]
[    7.309245] mt7622-wmac 18000000.wmac: N9 Firmware Version: _reserved_, Build Time: 20220630094834
[    7.320650] urngd: v1.0.2 started.
[    7.397033] mtk-pcie 1a143000.pcie: msi#0 address_hi 0x0 address_lo 0x44f950c0
[    7.457233] mt7915e 0000:01:00.0: HW/SW Version: 0x8a108a10, Build Time: 20240429200716a
[    7.457233]
[    7.494110] mt7915e 0000:01:00.0: WM Firmware Version: ____000000, Build Time: 20240429200752
[    7.518418] mt7915e 0000:01:00.0: WA Firmware Version: DEV_000000, Build Time: 20240429200812
[    7.670741] mt7915e 0000:01:00.0: eeprom load fail, use default bin
[    7.677142] mt7915e 0000:01:00.0: Direct firmware load for mediatek/mt7915_eeprom.bin failed with error -2
[    7.686820] mt7915e 0000:01:00.0: Falling back to sysfs fallback for: mediatek/mt7915_eeprom.bin
[    7.705183] mt7915e: probe of 0000:01:00.0 failed with error -12
[    7.735109] PPP generic driver version 2.4.2
[    7.740321] NET: Registered PF_PPPOX protocol family
[    7.749301] kmodloader: done loading kernel modules from /etc/modules.d/*
[   17.947075] platform 1b100000.ethernet: deferred probe pending



BusyBox v1.36.1 (2024-08-24 18:35:30 UTC) built-in shell (ash)

  _______                     ________        __
 |       |.-----.-----.-----.|  |  |  |.----.|  |_
 |   -   ||  _  |  -__|     ||  |  |  ||   _||   _|
 |_______||   __|_____|__|__||________||__|  |____|
          |__| W I R E L E S S   F R E E D O M
 -----------------------------------------------------
 OpenWrt SNAPSHOT, r27218-1d976f83e4
 -----------------------------------------------------
=== WARNING! =====================================
There is no root password defined on this device!
Use the "passwd" command to set up a new password
in order to prevent unauthorized SSH logins.
--------------------------------------------------
root@OpenWrt:~# ifconfig
lo        Link encap:Local Loopback
          inet addr:127.0.0.1  Mask:255.0.0.0
          inet6 addr: ::1/128 Scope:Host
          UP LOOPBACK RUNNING  MTU:65536  Metric:1
          RX packets:48 errors:0 dropped:0 overruns:0 frame:0
          TX packets:48 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:3744 (3.6 KiB)  TX bytes:3744 (3.6 KiB)

root@OpenWrt:~#

importan(?) lines:

Net:
Error: ethernet@1b100000 address ff:ff:ff:ff:ff:ff illegal value
eth0: ethernet@1b100000
Error: ethernet@1b100000 address ff:ff:ff:ff:ff:ff illegal value

Not sure if something has changed in kernel 6.6 or OpenWrt MAIN branch that makes it not setup the network interfaces.

EDIT: Oh, I think because FACTORY data has moved to inside UBI in the FIP-in-UBI setup, the MAIN SNAPSHOT initramfs-recovery.itb is expecting FACTORY data inside the UBI volume which is not there in your setup. The question is, if the FACTORY data is still intact in mtd2, why is the @daniel Installer complaining about FACTORY data and exiting the script?

I suggest these steps (based on https://github.com/dangowrt/owrt-ubi-installer/blob/4763f2e6e5fb2220b68b7d7bd8532920050c51bc/files/installer/install.sh):

  1. Sysupgrade 23.05.4 initramfs-recovery.itb https://archive.openwrt.org/releases/23.05.4/targets/mediatek/mt7622/openwrt-23.05.4-mediatek-mt7622-linksys_e8450-ubi-initramfs-recovery.itb . NOTE this image does not contain LuCi interface. After sysupgrade VERIFY that you have working ethernet connection from PC to RT3200 before proceeding to next step.

  2. Copy https://archive.openwrt.org/releases/23.05.4/targets/mediatek/mt7622/packages/kmod-mtd-rw_5.15.162+git-20160214-2_aarch64_cortex-a53.ipk to /tmp using SCP and install using opkg.

opkg install /tmp/kmod-mtd-rw_5.15.162+git-20160214-2_aarch64_cortex-a53.ipk

  1. Load the mtd-rw kmod

insmod mtd-rw.ko i_want_a_brick=1

  1. Copy BL2 v2.4 from https://archive.openwrt.org/releases/22.03.7/targets/mediatek/mt7622/openwrt-22.03.7-mediatek-mt7622-linksys_e8450-ubi-preloader.bin to /tmp and then run the following command to flash it:
for bl2start in 0x0 0x20000 0x40000 0x60000 ; do
	mtd -p ${bl2start} write /tmp/openwrt-22.03.7-mediatek-mt7622-linksys_e8450-ubi-preloader.bin /dev/mtd0
	sync
done
  1. Copy BL31 FIP from 23.05.4 https://archive.openwrt.org/releases/23.05.4/targets/mediatek/mt7622/openwrt-23.05.4-mediatek-mt7622-linksys_e8450-ubi-bl31-uboot.fip to /tmp and then run the following command to flash it:

mtd write /tmp/openwrt-23.05.4-mediatek-mt7622-linksys_e8450-ubi-bl31-uboot.fip /dev/mtd1

  1. Copy your CORRECT mtd2 (factory) to /tmp and flash it to mtd2. THIS STEP IS CRITICAL to get back to working FACTORY data.

mtd write /tmp/factory.bin /dev/mtd2

  1. Sysupgrade v1.1.3 installer.itb .

  2. If after above step the device booted into the MAIN SNAPSHOT initramfs-recovery, then FIP-in-UBI setup is successful and you can proceed with sysupgrade of normal OpenWrt MAIN SNAPSHOT image.

1 Like

This suggest your ubootenv volume's ethaddr variable is storing ff:ff:ff:ff:ff:ff. Something have happened to your router where it tries to rebuild your ubootenv volume data with invalid factory information. You probably have to rebuild your ubootenv and ubootenv2 when booted into openwrt 23.05.4 build.

Anyone knows how to do this?

Edit: Oh it looks like this can be reset via U-boot itself (Option a.) You may want to try it?

Also, it looks to me your router is still storing your factory data in MTD partitions, which is why you said running 23.05.4 is OK? Running snapshots builds (with kernel 6.6.x) will not work for you, as it expects factory to be in UBI volumes now.

@ka2107:

Thanks!!! snapshot recovery is running with network and correct mac! And my self build image works.

Also your steps recreated ubi (see log), there are now 7 instead 5 partitions + renamings, boot_backup exists. MTDs are now only 2 instead 3.

Full log of the steps of you post (linebreaks because of serial)


root@OpenWrt:/tmp/x# uname -a
Linux OpenWrt 5.15.162 #0 SMP Mon Jul 15 22:14:18 2024 aarch64 GNU/Linux
root@OpenWrt:/tmp/x# opkg install kmod-mtd-rw_5.15.162+git-20160214-2_aarch64_co
rtex-a53.ipk
Installing kmod-mtd-rw (5.15.162+git-20160214-2) to root...
Configuring kmod-mtd-rw.
root@OpenWrt:/tmp/x# insmod mtd-rw.ko i_want_a_brick=1
[  112.362461] mtd-rw: mtd0: setting writeable flag
[  112.367153] mtd-rw: mtd1: setting writeable flag
[  112.371772] mtd-rw: mtd2: setting writeable flag
root@OpenWrt:/tmp/x# for bl2start in 0x0 0x20000 0x40000 0x60000 ; do
> mtd -p ${bl2start} write /tmp/x/openwrt-22.03.7-mediatek-mt7622-linksys_e8450-
ubi-preloader.bin /dev/mtd0
> sync
> done
Unlocking /dev/mtd0 ...

Writing from /tmp/x/openwrt-22.03.7-mediatek-mt7622-linksys_e8450-ubi-preloader.bin to /dev/mtd0 ...
Unlocking /dev/mtd0 ...
Seeking on mtd device '/dev/mtd0' to: 131072

Writing from /tmp/x/openwrt-22.03.7-mediatek-mt7622-linksys_e8450-ubi-preloader.bin to /dev/mtd0 ...
Unlocking /dev/mtd0 ...
Seeking on mtd device '/dev/mtd0' to: 262144

Writing from /tmp/x/openwrt-22.03.7-mediatek-mt7622-linksys_e8450-ubi-preloader.bin to /dev/mtd0 ...
Unlocking /dev/mtd0 ...
Seeking on mtd device '/dev/mtd0' to: 393216

Writing from /tmp/x/openwrt-22.03.7-mediatek-mt7622-linksys_e8450-ubi-preloader.bin to /dev/mtd0 ...
root@OpenWrt:/tmp/x# mtd write penwrt-23.05.4-mediatek-mt7622-linksys_e8450-ubi-
b^C

root@OpenWrt:/tmp/x# l
/bin/ash: l: not found
root@OpenWrt:/tmp/x# ls -al
drwxr-xr-x    2 root     root           120 Jul 15 22:18 .
drwxrwxrwt   18 root     root           440 Jul 15 22:15 ..
-rw-r--r--    1 root     root          2346 Aug 26  2024 kmod-mtd-rw_5.15.162+git-20160214-2_aarch64_cortex-a53.ipk
-rw-r--r--    1 root     root          2446 Aug 24  2024 kmod-mtd-rw_6.6.47.2021.02.28~e8776739-r1_aarch64_cortex-a53.ipk
-rw-r--r--    1 root     root         67445 Aug 26  2024 openwrt-22.03.7-mediatek-mt7622-linksys_e8450-ubi-preloader.bin
-rw-r--r--    1 root     root       1020236 Aug 26  2024 openwrt-23.05.4-mediatek-mt7622-linksys_e8450-ubi-bl31-uboot.fip
root@OpenWrt:/tmp/x# mtd write /tmp/x/openwrt-23.05.4-mediatek-mt7622-linksys_e8
450-ubi-bl31-uboot.fip /dev/mtd1
Unlocking /dev/mtd1 ...

Writing from /tmp/x/openwrt-23.05.4-mediatek-mt7622-linksys_e8450-ubi-bl31-uboot.fip to /dev/mtd1 ...
root@OpenWrt:/tmp/x# mtd write ./mtd2 /dev/mtd2
Unlocking /dev/mtd2 ...

Writing from ./mtd2 to /dev/mtd2 ...
root@OpenWrt:/tmp/x# sync
root@OpenWrt:/tmp/x# sysupgrade -F openwrt-mediatek-mt7622-linksys_e8450-ubi-ini
tramfs-recovery-installer.itb
Mon Jul 15 22:21:55 UTC 2024 upgrade: Image metadata not present
Image check failed but --force given - will update anyway!
Cannot save config while running from ramdisk.
Mon Jul 15 22:21:55 UTC 2024 upgrade: Commencing upgrade. Closing all shell sessions.
Command failed: Watchdog handover: fd=3
- watchdog -
Watchdog does not have CARDRESET support
Mon Jul 15 22:21:55 UTC 2024 upgrade: Sending TERM to remaining processes ...
Mon Jul 15 22:21:59 UTC 2024 upgrade: Sending KILL to remaining processes ...
[  474.011676] stage2 (2975): drop_caches: 3
Mon Jul 15 22:22:05 UTC 2024 upgrade: Switching to ramdisk...
Mon Jul 15 22:22:06 UTC 2024 upgrade: Performing system upgrade...
umount: can't unmount /dev/ubiblock0_3: Invalid argument
[  475.673518] block ubiblock0_3: released
Volume ID 3, size 118 LEBs (14983168 bytes, 14.2 MiB), LEB size 126976 bytes (124.0 KiB), dynamic, name "fit", alignment 1
Set volume size to 98787328
Volume ID 4, size 778 LEBs (98787328 bytes, 94.2 MiB), LEB size 126976 bytes (124.0 KiB), dynamic, name "rootfs_data", alignment 1
sysupgrade successful
umount: can't unmount /dev: Resource busy
umount: can't unmount /tmp: Resource busy
[  478.793850] reboot: Restarting system

F0: 102B 0000
F6: 0000 0000
V0: 0000 0000 [0001]
00: 0000 0000
BP: 0400 0041 [0000]
G0: 1190 0000
T0: 0000 02B0 [000F]
Jump to BL

NOTICE:  BL2: v2.4(release):OpenWrt v2021-05-08-d2c75b21-3 (mt7622-snand-1ddr)
NOTICE:  BL2: Built : 22:25:54, Jul 15 2024
NOTICE:  SPI-NAND: FM35Q1GA (128MB)
NOTICE:  BL2: Booting BL31
NOTICE:  BL31: v2.9(release):OpenWrt v2023-07-24-00ac6db3-2 (mt7622-snand-1ddr)
NOTICE:  BL31: Built : 22:14:18, Jul 15 2024


U-Boot 2023.07.02-OpenWrt-r24012-d8dd03c46f (Jul 15 2024 - 22:14:18 +0000)

CPU:   MediaTek MT7622
Model: mt7622-linksys-e8450-ubi
DRAM:  512 MiB
Core:  48 devices, 21 uclasses, devicetree: separate
MMC:
Loading Environment from UBI... SPI-NAND: FM35Q1GA (128MB)
Read 126976 bytes from volume ubootenv to 000000005f7bf200
Read 126976 bytes from volume ubootenv2 to 000000005f7de240
OK
In:    serial@11002000
Out:   serial@11002000
Err:   serial@11002000
reset button found
Loading Environment from UBI... UBI partition 'ubi' already selected
Read 126976 bytes from volume ubootenv to 000000005f7bf200
Read 126976 bytes from volume ubootenv2 to 000000005f7de240
OK
Net:
Error: ethernet@1b100000 address ff:ff:ff:ff:ff:ff illegal value
eth0: ethernet@1b100000
Error: ethernet@1b100000 address ff:ff:ff:ff:ff:ff illegal value

No EFI system partition
No EFI system partition
Failed to persist EFI variables

        ( ( ( OpenWrt ) ) )       U-Boot 2023.07.02-OpenWrt-r24012-d8dd03c46f (Jul 15 2024 - 22:14:18 +0000)

      1. Run default boot command.
      2. Boot system via TFTP.
      3. Boot production system from flash.
      4. Boot recovery system from flash.
      5. Load production system via TFTP then write to flash.
      6. Load recovery system via TFTP then write to flash.
      7. Load BL31+U-Boot FIP via TFTP then write to flash.
      8. Load BL2 preloader via TFTP then write to flash.
      9. Reboot.
      a. Reset all settings to factory defaults.
      0. U-Boot console


  Press UP/DOWN to move, ENTER to select, ESC to quit
UBI partition 'ubi' already selected
No size specified -> Using max size (14983168)
Read 14983168 bytes from volume fit to 0000000048000000

## Checking Image at 48000000 ...
   FIT image found
   FIT description: ARM64 OpenWrt FIT (Flattened Image Tree)
    Image 0 (kernel-1)
     Description:  ARM64 OpenWrt Linux-6.6.45
     Type:         Kernel Image
     Compression:  lzma compressed
     Data Start:   0x480000fc
     Data Size:    4327076 Bytes = 4.1 MiB
     Architecture: AArch64
     OS:           Linux
     Load Address: 0x44000000
     Entry Point:  0x44000000
     Hash algo:    crc32
     Hash value:   212dd8a0
     Hash algo:    sha1
     Hash value:   fc1cc1ac0fb86d7a9086da40b300ece1b699ddf4
    Image 1 (initrd-1)
     Description:  ARM64 OpenWrt linksys_e8450-ubi initrd
     Type:         RAMDisk Image
     Compression:  uncompressed
     Data Start:   0x484208dc
     Data Size:    10578080 Bytes = 10.1 MiB
     Architecture: AArch64
     OS:           Linux
     Load Address: unavailable
     Entry Point:  unavailable
     Hash algo:    crc32
     Hash value:   10fda29c
     Hash algo:    sha1
     Hash value:   97a7c23b9f44412d5cbc074de9a3b5e4af4e1abc
    Image 2 (fdt-1)
     Description:  ARM64 OpenWrt linksys_e8450-ubi device tree blob
     Type:         Flat Device Tree
     Compression:  uncompressed
     Data Start:   0x48e3728c
     Data Size:    31507 Bytes = 30.8 KiB
     Architecture: AArch64
     Hash algo:    crc32
     Hash value:   26f862fe
     Hash algo:    sha1
     Hash value:   598b874eb0c650756d2037571ba19d8fa874f1d9
    Default Configuration: 'config-1'
    Configuration 0 (config-1)
     Description:  OpenWrt linksys_e8450-ubi
     Kernel:       kernel-1
     Init Ramdisk: initrd-1
     FDT:          fdt-1
## Checking hash(es) for FIT Image at 48000000 ...
   Hash(es) for Image 0 (kernel-1): crc32+ sha1+
   Hash(es) for Image 1 (initrd-1): crc32+ sha1+
   Hash(es) for Image 2 (fdt-1): crc32+ sha1+
## Loading kernel from FIT Image at 48000000 ...
   Using 'config-1' configuration
   Trying 'kernel-1' kernel subimage
     Description:  ARM64 OpenWrt Linux-6.6.45
     Type:         Kernel Image
     Compression:  lzma compressed
     Data Start:   0x480000fc
     Data Size:    4327076 Bytes = 4.1 MiB
     Architecture: AArch64
     OS:           Linux
     Load Address: 0x44000000
     Entry Point:  0x44000000
     Hash algo:    crc32
     Hash value:   212dd8a0
     Hash algo:    sha1
     Hash value:   fc1cc1ac0fb86d7a9086da40b300ece1b699ddf4
   Verifying Hash Integrity ... crc32+ sha1+ OK
## Loading ramdisk from FIT Image at 48000000 ...
   Using 'config-1' configuration
   Trying 'initrd-1' ramdisk subimage
     Description:  ARM64 OpenWrt linksys_e8450-ubi initrd
     Type:         RAMDisk Image
     Compression:  uncompressed
     Data Start:   0x484208dc
     Data Size:    10578080 Bytes = 10.1 MiB
     Architecture: AArch64
     OS:           Linux
     Load Address: unavailable
     Entry Point:  unavailable
     Hash algo:    crc32
     Hash value:   10fda29c
     Hash algo:    sha1
     Hash value:   97a7c23b9f44412d5cbc074de9a3b5e4af4e1abc
   Verifying Hash Integrity ... crc32+ sha1+ OK
## Loading fdt from FIT Image at 48000000 ...
   Using 'config-1' configuration
   Trying 'fdt-1' fdt subimage
     Description:  ARM64 OpenWrt linksys_e8450-ubi device tree blob
     Type:         Flat Device Tree
     Compression:  uncompressed
     Data Start:   0x48e3728c
     Data Size:    31507 Bytes = 30.8 KiB
     Architecture: AArch64
     Hash algo:    crc32
     Hash value:   26f862fe
     Hash algo:    sha1
     Hash value:   598b874eb0c650756d2037571ba19d8fa874f1d9
   Verifying Hash Integrity ... crc32+ sha1+ OK
   Booting using the fdt blob at 0x48e3728c
Working FDT set to 48e3728c
   Uncompressing Kernel Image
   Loading Ramdisk to 5ddd4000, end 5e7ea8a0 ... OK
   Loading Device Tree to 000000005ddc9000, end 000000005ddd3b12 ... OK
Working FDT set to 5ddc9000
Add 'ramoops@42ff0000' node failed: FDT_ERR_EXISTS

Starting kernel ...

[    0.000000] Booting Linux on physical CPU 0x0000000000 [0x410fd034]
[    0.000000] Linux version 6.6.45 (builder@buildhost) (aarch64-openwrt-linux-musl-gcc (OpenWrt GCC 13.3.0 r27137-f51cb74473) 13.3.0, GNU ld (GNU Binutils) 2.42) #0 SMP Mon Aug 12 22:48:06 2024
[    0.000000] Machine model: Linksys E8450 (UBI)
[    0.000000] earlycon: uart8250 at MMIO32 0x0000000011002000 (options '')
[    0.000000] printk: bootconsole [uart8250] enabled
[    0.000000] OF: reserved mem: 0x0000000042ff0000..0x0000000042ffffff (64 KiB) map non-reusable ramoops@42ff0000
[    0.000000] OF: reserved mem: 0x0000000043000000..0x000000004302ffff (192 KiB) nomap non-reusable secmon@43000000
[    0.000000] Zone ranges:
[    0.000000]   DMA      [mem 0x0000000040000000-0x000000005fffffff]
[    0.000000]   DMA32    empty
[    0.000000]   Normal   empty
[    0.000000] Movable zone start for each node
[    0.000000] Early memory node ranges
[    0.000000]   node   0: [mem 0x0000000040000000-0x0000000042ffffff]
[    0.000000]   node   0: [mem 0x0000000043000000-0x000000004302ffff]
[    0.000000]   node   0: [mem 0x0000000043030000-0x000000005fffffff]
[    0.000000] Initmem setup node 0 [mem 0x0000000040000000-0x000000005fffffff]
[    0.000000] psci: probing for conduit method from DT.
[    0.000000] psci: PSCIv1.1 detected in firmware.
[    0.000000] psci: Using standard PSCI v0.2 function IDs
[    0.000000] psci: MIGRATE_INFO_TYPE not supported.
[    0.000000] psci: SMC Calling Convention v1.4
[    0.000000] percpu: Embedded 18 pages/cpu s35112 r8192 d30424 u73728
[    0.000000] pcpu-alloc: s35112 r8192 d30424 u73728 alloc=18*4096
[    0.000000] pcpu-alloc: [0] 0 [0] 1
[    0.000000] Detected VIPT I-cache on CPU0
[    0.000000] CPU features: kernel page table isolation disabled by kernel configuration
[    0.000000] CPU features: detected: ARM erratum 843419
[    0.000000] alternatives: applying boot alternatives
[    0.000000] Kernel command line: earlycon=uart8250,mmio32,0x11002000 console=ttyS0,115200n1 swiotlb=512 ubi.block=0,fit root=/dev/fit0 rootwait
[    0.000000] Dentry cache hash table entries: 65536 (order: 7, 524288 bytes, linear)
[    0.000000] Inode-cache hash table entries: 32768 (order: 6, 262144 bytes, linear)
[    0.000000] Built 1 zonelists, mobility grouping on.  Total pages: 129024
[    0.000000] mem auto-init: stack:off, heap alloc:off, heap free:off
[    0.000000] software IO TLB: area num 2.
[    0.000000] software IO TLB: mapped [mem 0x000000005f4c0000-0x000000005f5c0000] (1MB)
[    0.000000] Memory: 489004K/524288K available (8960K kernel code, 912K rwdata, 2572K rodata, 384K init, 309K bss, 35284K reserved, 0K cma-reserved)
[    0.000000] SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=2, Nodes=1
[    0.000000] rcu: Hierarchical RCU implementation.
[    0.000000]  Tracing variant of Tasks RCU enabled.
libscan: scanning eraseblock 1019 -- 100 % complete  -enlistment delay iseblock 144 -- 14 % complete
ubiformat: 1003 eraseblocks have valid erase counter, mean value is 4
ubiformat: 7 eraseblocks are supposedly empty
ubiformat: 1 bad eraseblocks found, numbers: 229
ubiformat: warning!: 9 of 1019 eraseblocks contain non-UBI data
ubiformat: formatting era[   13.466562] platform fitblk: deferred probe pending
seblock 808 -- 7[   13.471921] platform 1b100000.ethernet: deferred probe pending
ubiformat: formatting eraseblock 1019 -- 100 % complete
[   15.234979] ubi0: default fastmap pool size: 50
[   15.239586] ubi0: default fastmap WL pool size: 25
[   15.244383] ubi0: attaching mtd1
[   15.556215] ubi0: scanning is finished
[   15.565414] ubi0: attached mtd1 (name "ibu", size 127 MiB)
[   15.570946] ubi0: PEB size: 131072 bytes (128 KiB), LEB size: 126976 bytes
[   15.577826] ubi0: min./max. I/O unit sizes: 2048/2048, sub-page size 2048
[   15.584611] ubi0: VID header offset: 2048 (aligned 2048), data offset: 4096
[   15.591572] ubi0: good PEBs: 1019, bad PEBs: 1, corrupted PEBs: 0
[   15.597661] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 128
[   15.604875] ubi0: max/mean erase counter: 66/4, WL threshold: 4096, image sequence number: 1006343668
[   15.614096] ubi0: available PEBs: 994, total reserved PEBs: 25, PEBs reserved for bad PEB handling: 19
[   15.623410] ubi0: background thread "ubi_bgt0d" started, PID 653
UBI device number 0, total 1019 LEBs (129388544 bytes, 123.3 MiB), available 994 LEBs (126214144 bytes, 120.3 MiB), LEB size 126976 bytes (124.0 KiB)
Volume ID 0, size 9 LEBs (1142784 bytes, 1.0 MiB), LEB size 126976 bytes (124.0 KiB), static, name "fip", alignment 1
Volume ID 1, size 5 LEBs (634880 bytes, 620.0 KiB), LEB size 126976 bytes (124.0 KiB), static, name "factory", alignment 1
[   17.225451] OF: Bad cell count for /spi@1100d000/flash@0/partitions
Volume ID 2, size 1 LEBs (126976 bytes, 124.0 KiB), LEB size 126976 bytes (124.0 KiB), dynamic, name "ubootenv", alignment 1
[   17.247694] OF: Bad cell count for /spi@1100d000/flash@0/partitions
Volume ID 3, size 1 LEBs (126976 bytes, 124.0 KiB), LEB size 126976 bytes (124.0 KiB), dynamic, name "ubootenv2", alignment 1
write recovery ubi volume
Volume ID 4, size 59 LEBs (7491584 bytes, 7.1 MiB), LEB size 126976 bytes (124.0 KiB), dynamic, name "recovery", alignment 1
[   18.988399] block ubiblock0_5: created from ubi0:5(fit)
Volume ID 5, size 1 LEBs (126976 bytes, 124.0 KiB), LEB size 126976 bytes (124.0 KiB), dynamic, name "fit", alignment 1
writing backup files to ubi volume...
Volume ID 6, size 67 LEBs (8507392 bytes, 8.1 MiB), LEB size 126976 bytes (124.0 KiB), dynamic, name "boot_backup", alignment 1
[   19.021482] UBIFS (ubi0:6): default file-system created
[   19.027068] UBIFS (ubi0:6): Mounting in unauthenticated mode
[   19.032838] UBIFS (ubi0:6): background thread "ubifs_bgt0_6" started, PID 696
[   19.061340] UBIFS (ubi0:6): UBIFS: mounted UBI device 0, volume 6, name "boot_backup"
[   19.069245] UBIFS (ubi0:6): LEB size: 126976 bytes (124 KiB), min./max. I/O unit sizes: 2048 bytes/2048 bytes
[   19.079175] UBIFS (ubi0:6): FS size: 7237632 bytes (6 MiB, 57 LEBs), max 67 LEBs, journal size 1015809 bytes (0 MiB, 6 LEBs)
[   19.090400] UBIFS (ubi0:6): reserved for root: 341850 bytes (333 KiB)
[   19.096840] UBIFS (ubi0:6): media format: w5/r0 (latest is w5/r0), UUID AFF70593-FB24-4CB7-8087-091875F9C1DD, small LPT model
[   19.412797] UBIFS (ubi0:6): un-mount UBI device 0
[   19.417579] UBIFS (ubi0:6): background thread "ubifs_bgt0_6" stops
[   24.467277] reboot: Restarting system

F0: 102B 0000
F6: 0000 0000
V0: 0000 0000 [0001]
00: 0000 0000
BP: 0400 0041 [0000]
G0: 1190 0000
T0: 0000 02F1 [000F]
Jump to BL

NOTICE:  BL2: v2.10.0   (release):OpenWrt v2024.01.17~bacca82a-3 (mt7622-snand-ubi-1ddr)
NOTICE:  BL2: Built : 22:48:06, Aug 12 2024
NOTICE:  WDT: [40000000] Software reset (reboot)
NOTICE:  CPU: MT7622
NOTICE:  SPI-NAND: adjusting SPI-NAND pin drive strength to 12mA
NOTICE:  SPI-NAND: FM35Q1GA (128MB)
NOTICE:  UBI: scanning [0x80000 - 0x8000000] ...
NOTICE:  UBI: scanning is finished
NOTICE:  UBI: PEB size: 131072 bytes (128 KiB), LEB size: 126976 bytes
NOTICE:  UBI: VID header offset: 2048 (aligned 2048), data offset: 4096
NOTICE:  UBI: Volume fip (Id #0) size is 1015884 bytes
NOTICE:  BL2: Booting BL31
NOTICE:  BL31: v2.10.0  (release):OpenWrt v2024.01.17~bacca82a-3 (mt7622-snand-ubi-1ddr)
NOTICE:  BL31: Built : 22:48:06, Aug 12 2024


U-Boot 2024.07-OpenWrt-r27137-f51cb74473 (Aug 12 2024 - 22:48:06 +0000)

CPU:   MediaTek MT7622
Model: mt7622-linksys-e8450-ubi
DRAM:  512 MiB
Core:  49 devices, 21 uclasses, devicetree: separate
MMC:
Loading Environment from UBI... SPI-NAND: FM35Q1GA (128MB)
Read 126976 bytes from volume ubootenv to 000000005f7bf0c0
Read 126976 bytes from volume ubootenv2 to 000000005f7de100
*** Warning - bad CRC, using default environment

In:    serial@11002000
Out:   serial@11002000
Err:   serial@11002000
reset button found
*** Warning - bad CRC, using default environment

Net:
Error: ethernet@1b100000 No valid MAC address found.
No ethernet found.

No size specified -> Using max size (524288)
Read 524288 bytes from volume factory to 0000000040080000
Saving Environment to UBI... UBI partition 'ubi' already selected
Writing to UBI... done
OK
Saving Environment to UBI... UBI partition 'ubi' already selected
Writing to UBI... done
OK
off

        ( ( ( OpenWrt ) ) )       U-Boot 2024.07-OpenWrt-r27137-f51cb74473 (Aug 12 2024 - 22:48:06 +0000)

      1. Run default boot command.
      2. Boot system via TFTP.
      3. Boot production system from flash.
      4. Boot recovery system from flash.
      5. Load production system via TFTP then write to flash.
      6. Load recovery system via TFTP then write to flash.
      7. Load BL31+U-Boot FIP via TFTP then write to flash.
      8. Load BL2 preloader via TFTP then write to flash.
      9. Reboot.
      a. Reset all settings to factory defaults.
      0. Exit


  Press UP/DOWN to move, ENTER to select, ESC to quit
UBI partition 'ubi' already selected
No size specified -> Using max size (126976)
Read 126976 bytes from volume fit to 0000000048000000

## Checking Image at 48000000 ...
Unknown image format!
No size specified -> Using max size (7491584)
Read 7491584 bytes from volume recovery to 0000000048000000
## Loading kernel from FIT Image at 48000000 ...
   Using 'config-1' configuration
   Trying 'kernel-1' kernel subimage
     Description:  ARM64 OpenWrt Linux-6.6.45
     Type:         Kernel Image
     Compression:  lzma compressed
     Data Start:   0x480000fc
     Data Size:    4327076 Bytes = 4.1 MiB
     Architecture: AArch64
     OS:           Linux
     Load Address: 0x44000000
     Entry Point:  0x44000000
     Hash algo:    crc32
     Hash value:   212dd8a0
     Hash algo:    sha1
     Hash value:   fc1cc1ac0fb86d7a9086da40b300ece1b699ddf4
   Verifying Hash Integrity ... crc32+ sha1+ OK
## Loading ramdisk from FIT Image at 48000000 ...
   Using 'config-1' configuration
   Trying 'initrd-1' ramdisk subimage
     Description:  ARM64 OpenWrt linksys_e8450-ubi initrd
     Type:         RAMDisk Image
     Compression:  uncompressed
     Data Start:   0x484208dc
     Data Size:    3068880 Bytes = 2.9 MiB
     Architecture: AArch64
     OS:           Linux
     Load Address: unavailable
     Entry Point:  unavailable
     Hash algo:    crc32
     Hash value:   a6d1879d
     Hash algo:    sha1
     Hash value:   6897752aaaa192b49bfd82083f80c3890a660d52
   Verifying Hash Integrity ... crc32+ sha1+ OK
## Loading fdt from FIT Image at 48000000 ...
   Using 'config-1' configuration
   Trying 'fdt-1' fdt subimage
     Description:  ARM64 OpenWrt linksys_e8450-ubi device tree blob
     Type:         Flat Device Tree
     Compression:  uncompressed
     Data Start:   0x4870ddbc
     Data Size:    31553 Bytes = 30.8 KiB
     Architecture: AArch64
     Hash algo:    crc32
     Hash value:   96c645f4
     Hash algo:    sha1
     Hash value:   6dfe5855931ce4620c8593e5050d54386555cc87
   Verifying Hash Integrity ... crc32+ sha1+ OK
   Booting using the fdt blob at 0x4870ddbc
Working FDT set to 4870ddbc
   Uncompressing Kernel Image to 44000000
   Loading Ramdisk to 5e50b000, end 5e7f83d0 ... OK
   Loading Device Tree to 000000005e500000, end 000000005e50ab40 ... OK
Working FDT set to 5e500000
Add 'ramoops@42ff0000' node failed: FDT_ERR_EXISTS

Starting kernel ...

[    0.000000] Booting Linux on physical CPU 0x0000000000 [0x410fd034]
[    0.000000] Linux version 6.6.45 (builder@buildhost) (aarch64-openwrt-linux-musl-gcc (OpenWrt GCC 13.3.0 r27137-f51cb74473) 13.3.0, GNU ld (GNU Binutils) 2.42) #0 SMP Mon Aug 12 22:48:06 2024
[    0.000000] Machine model: Linksys E8450 (UBI)
[    0.000000] earlycon: uart8250 at MMIO32 0x0000000011002000 (options '')
[    0.000000] printk: bootconsole [uart8250] enabled
[    0.000000] OF: reserved mem: 0x0000000042ff0000..0x0000000042ffffff (64 KiB) map non-reusable ramoops@42ff0000
[    0.000000] OF: reserved mem: 0x0000000043000000..0x000000004302ffff (192 KiB) nomap non-reusable secmon@43000000
[    0.000000] Zone ranges:
[    0.000000]   DMA      [mem 0x0000000040000000-0x000000005fffffff]
[    0.000000]   DMA32    empty
[    0.000000]   Normal   empty
...
...
...
[    3.742209] mtk_soc_eth 1b100000.ethernet eth0: configuring for fixed/2500base-x link mode
[    3.750958] mtk_soc_eth 1b100000.ethernet eth0: Link is Up - 2.5Gbps/Full - flow control rx/tx
[    3.926418] mt7530-mdio mdio-bus:1f lan1: configuring for phy/gmii link mode
Press the [f] key and hit [enter] to enter failsafe mode
Press the [1], [2], [3] or [4] key and hit [enter] to select the debug level
[    6.186591] procd: - early -
[    6.189561] procd: - watchdog -
[    6.724510] procd: - watchdog -
[    6.728092] procd: - ubus -
[    6.783480] procd: - init -
Please press Enter to activate this console.
[    6.997875] kmodloader: loading kernel modules from /etc/modules.d/*
[    7.039838] PPP generic driver version 2.4.2
[    7.045260] NET: Registered PF_PPPOX protocol family
[    7.054125] kmodloader: done loading kernel modules from /etc/modules.d/*
[    7.204169] urngd: v1.0.2 started.
[   11.297044] mtk_soc_eth 1b100000.ethernet eth0: Link is Down
[   11.314148] mtk_soc_eth 1b100000.ethernet eth0: configuring for fixed/2500base-x link mode
[   11.328754] mtk_soc_eth 1b100000.ethernet eth0: Link is Up - 2.5Gbps/Full - flow control rx/tx
[   11.337625] mt7530-mdio mdio-bus:1f lan1: configuring for phy/gmii link mode
[   11.349769] br-lan: port 1(lan1) entered blocking state
[   11.355014] br-lan: port 1(lan1) entered disabled state
[   11.360339] mt7530-mdio mdio-bus:1f lan1: entered allmulticast mode
[   11.366684] mtk_soc_eth 1b100000.ethernet eth0: entered allmulticast mode
[   11.375994] mt7530-mdio mdio-bus:1f lan1: entered promiscuous mode
[   11.400836] mt7530-mdio mdio-bus:1f lan2: configuring for phy/gmii link mode
[   11.412109] br-lan: port 2(lan2) entered blocking state
[   11.417417] br-lan: port 2(lan2) entered disabled state
[   11.422683] mt7530-mdio mdio-bus:1f lan2: entered allmulticast mode
[   11.445154] mt7530-mdio mdio-bus:1f lan2: entered promiscuous mode
[   11.473337] mt7530-mdio mdio-bus:1f lan3: configuring for phy/gmii link mode
[   11.486654] br-lan: port 3(lan3) entered blocking state
[   11.491903] br-lan: port 3(lan3) entered disabled state
[   11.497248] mt7530-mdio mdio-bus:1f lan3: entered allmulticast mode
[   11.506744] mt7530-mdio mdio-bus:1f lan3: entered promiscuous mode
[   11.529857] mt7530-mdio mdio-bus:1f lan4: configuring for phy/gmii link mode
[   11.545270] br-lan: port 4(lan4) entered blocking state
[   11.550605] br-lan: port 4(lan4) entered disabled state
[   11.555899] mt7530-mdio mdio-bus:1f lan4: entered allmulticast mode
[   11.573765] mt7530-mdio mdio-bus:1f lan4: entered promiscuous mode
[   11.598716] mt7530-mdio mdio-bus:1f wan: configuring for phy/gmii link mode
[   14.696622] mt7530-mdio mdio-bus:1f lan3: Link is Up - 1Gbps/Full - flow control off
[   14.704452] br-lan: port 3(lan3) entered blocking state
[   14.709722] br-lan: port 3(lan3) entered forwarding state



BusyBox v1.36.1 (2024-08-12 22:48:06 UTC) built-in shell (ash)

  _______                     ________        __
 |       |.-----.-----.-----.|  |  |  |.----.|  |_
 |   -   ||  _  |  -__|     ||  |  |  ||   _||   _|
 |_______||   __|_____|__|__||________||__|  |____|
          |__| W I R E L E S S   F R E E D O M
 -----------------------------------------------------
 OpenWrt SNAPSHOT, r27137-f51cb74473
 -----------------------------------------------------
=== WARNING! =====================================
There is no root password defined on this device!
Use the "passwd" command to set up a new password
in order to prevent unauthorized SSH logins.
--------------------------------------------------
root@OpenWrt:/# ubinfo -a 2>&1 |grep -E "^(N|C)"
Count of UBI devices:           1
Count of bad physical eraseblocks:       1
Count of reserved physical eraseblocks:  19
Current maximum erase counter value:     66
Character device major/minor:            250:0
Name:        fip
Character device major/minor: 250:1
Name:        factory
Character device major/minor: 250:2
Name:        ubootenv
Character device major/minor: 250:3
Name:        ubootenv2
Character device major/minor: 250:4
Name:        recovery
Character device major/minor: 250:5
Name:        fit
Character device major/minor: 250:6
Name:        boot_backup
Character device major/minor: 250:7
root@OpenWrt:/# ifconfig br-lan
br-lan    Link encap:Ethernet  HWaddr C4:41:1E:xx:xx:xx
          inet addr:192.168.1.1  Bcast:192.168.1.255  Mask:255.255.255.0
          inet6 addr: fd19:b6b0:cac3::1/60 Scope:Global
          inet6 addr: fe80::c641:1eff:fef8:9687/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:814 errors:0 dropped:0 overruns:0 frame:0
          TX packets:680 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:122435 (119.5 KiB)  TX bytes:627389 (612.6 KiB)

root@OpenWrt:/# cat /proc/mtd
dev:    size   erasesize  name
mtd0: 00080000 00020000 "bl2"
mtd1: 07f80000 00020000 "ubi"
root@OpenWrt:/#

Thanks again!

1 Like

@quarky:
Thanks, i dont know which way to fix is better, by ka2107's helped :slight_smile:

Instead the Net-Error messages, this is with correct env now:

Read 126976 bytes from volume ubootenv to 000000005f7bf0c0
Read 126976 bytes from volume ubootenv2 to 000000005f7de100

I see from your latest boot log that you have transitioned to factory in UBI volume structure now as you are running TF-A v2.10.

But it looks like your ubootenv/ubootenv2? volumes are still not storing the correct ethernet MAC address. Minor annoyance in this case as you will need to configure your ethernet port's MAC address in u-boot before you can perform TFTP recovery.

Probably easiest now is to fix u-boot's variable via SSH when booted into OpenWrt.

You should still see ethaddr=ff:ff:ff:ff:ff:ff if you run fw_printenv when you SSH into OpenWrt.

Just set it to your router's assigned MAC address and you should be good I think.

You are right, there is still something wrong :frowning:
I never used ips in range of 192.0.2.1

root@router:~#  fw_printenv
Warning: Bad CRC, using default environment
bootcmd=run distro_bootcmd
bootdelay=2
baudrate=115200
loadaddr=0x0
mtdids=
mtdparts=
bootm_size=0x10000000
eth6addr=02:00:11:22:33:47
ethaddr=02:00:11:22:33:44
fdt_addr_r=0xc00000
ipaddr=192.0.2.1
kernel_addr_r=0x1000000
pxefile_addr_r=0x2000
ramdisk_addr_r=0x2000000
scriptaddr=0x1000
stderr=serial,vidconsole
stdin=serial
stdout=serial,vidconsole

Wow, this looks nothing like the ubootenv information that should be stored. It looks like it is from factory.

The "Warning - bad CRC, using default environment" exists 2 times in my last big log

Can you paste your fw_printenv output? Is "bootcmd" still "boot_ubi" ?

I suggest maybe you boot into u-boot with your serial console, and reset u-boot environment to factory default (i.e. Option a. shown below). It should re-create ubootenv and fix the CRC error as well if I'm not wrong.

1 Like

Well, as i can not destroy any more i just tied it: env is fixed :slight_smile:

fw_printenv are now 51 lines, with correct "ethaddr", bootcmd and a lot items from uboot menu. Thanks!

But was it expected that this also resets openwrt settings?

# fw_printenv
boot_default=if env exists flag_recover ; then else run bootcmd ; fi ; run boot_recovery ; setenv replacevol 1 ; run boot_tftp_forever
boot_first=if button reset ; then led $bootled_rec on ; run boot_tftp_recovery ; setenv flag_recover 1 ; run boot_default ; fi ; bootmenu
boot_production=led $bootled_pwr on ; run ubi_read_production && bootm $loadaddr#$bootconf ; led $bootled_pwr off
boot_recovery=led $bootled_rec on ; run ubi_read_recovery ; bootm $loadaddr#$bootconf ; ubi remove recovery ; led $bootled_rec off
boot_serial_write_bl2=loadx $loadaddr 115200 && run snand_write_bl2
boot_serial_write_fip=loadx $loadaddr 115200 && run ubi_write_fip
boot_tftp=tftpboot $loadaddr $bootfile && bootm $loadaddr#$bootconf
boot_tftp_forever=led $bootled_rec on ; while true ; do run boot_tftp_recovery ; sleep 1 ; done
boot_tftp_production=tftpboot $loadaddr $bootfile_upg && iminfo $loadaddr && ubi part ubi && run ubi_write_production ubi_prepare_rootfs ; if env exists noboot ; then else bootm $loadaddr#$bootconf ; fi
boot_tftp_recovery=tftpboot $loadaddr $bootfile && iminfo $loadaddr && ubi part ubi && run ubi_write_recovery ; if env exists noboot ; then else bootm $loadaddr#$bootconf ; fi
boot_tftp_write_bl2=tftpboot $loadaddr $bootfile_bl2 && run snand_write_bl2
boot_tftp_write_fip=tftpboot $loadaddr $bootfile_fip && run ubi_write_fip
boot_ubi=ubi part ubi && run boot_production ; run boot_recovery
bootcmd=if pstore check ; then run boot_recovery ; else run boot_ubi ; fi
bootconf=config-1
bootdelay=3
bootfile=openwrt-mediatek-mt7622-linksys_e8450-ubi-initramfs-recovery.itb
bootfile_bl2=openwrt-mediatek-mt7622-linksys_e8450-ubi-preloader.bin
bootfile_fip=openwrt-mediatek-mt7622-linksys_e8450-ubi-bl31-uboot.fip
bootfile_upg=openwrt-mediatek-mt7622-linksys_e8450-ubi-squashfs-sysupgrade.itb
bootled_pwr=power:blue
bootled_rec=inet:orange on
bootmenu_0=Run default boot command.=run boot_default
bootmenu_1=Boot system via TFTP.=run boot_tftp ; run bootmenu_confirm_return
bootmenu_2=Boot production system from flash.=run boot_production ; run bootmenu_confirm_return
bootmenu_3=Boot recovery system from flash.=run boot_recovery ; run bootmenu_confirm_return
bootmenu_4=Load production system via TFTP then write to flash.=setenv noboot 1 ; setenv replacevol 1 ; run boot_tftp_production ; setenv noboot ; setenv replacevol ; run bootmenu_confirm_return
bootmenu_5=Load recovery system via TFTP then write to flash.=setenv noboot 1 ; setenv replacevol 1 ; run boot_tftp_recovery ; setenv noboot ; setenv replacevol ; run bootmenu_confirm_return
bootmenu_6=Load BL31+U-Boot FIP via TFTP then write to flash.=run boot_tftp_write_fip ; run bootmenu_confirm_return
bootmenu_7=Load BL2 preloader via TFTP then write to flash.=run boot_tftp_write_bl2 ; run bootmenu_confirm_return
bootmenu_8=Reboot.=reset
bootmenu_9=Reset all settings to factory defaults.=run reset_factory ; reset
bootmenu_confirm_return=askenv - Press ENTER to return to menu ; bootmenu 60
bootmenu_default=0
bootmenu_delay=3
bootmenu_title=      ( ( ( OpenWrt ) ) )       U-Boot 2024.07-OpenWrt-r27137-f51cb74473 (Aug 12 2024 - 22:48:06 +0000)
ethaddr=c4:41:1e:ab:cd:ef
filesize=80000
ipaddr=192.168.1.1
loadaddr=0x48000000
reset_factory=mw $loadaddr 0xff 0x1f000 ; ubi part ubi ; ubi write $loadaddr ubootenv 0x1f000 ; ubi write $loadaddr ubootenv2 0x1f000 ; ubi remove rootfs_data
serverip=192.168.1.254
snand_write_bl2=mtd erase bl2 && mtd write spi-nand0 $loadaddr 0x0 0x20000 && mtd write spi-nand0 $loadaddr 0x20000 0x20000 && mtd write spi-nand0 $loadaddr 0x40000 0x20000 && mtd write spi-nand0 $loadaddr 0x60000 0x20000
ubi_prepare_rootfs=if ubi check rootfs_data ; then else if env exists rootfs_data_max ; then ubi create rootfs_data $rootfs_data_max dynamic || ubi create rootfs_data - dynamic ; else ubi create rootfs_data - dynamic ; fi ; fi
ubi_read_production=ubi read $loadaddr fit && iminfo $loadaddr && run ubi_prepare_rootfs
ubi_read_recovery=ubi check recovery && ubi read $loadaddr recovery
ubi_remove_rootfs=ubi check rootfs_data && ubi remove rootfs_data
ubi_write_fip=run ubi_remove_rootfs ; ubi check fip && ubi remove fip ; ubi create fip 0x200000 static ; ubi write $loadaddr fip 0x200000
ubi_write_production=ubi check fit && env exists replacevol && ubi remove fit ; if ubi check fit ; then else run ubi_remove_rootfs ; ubi create fit $filesize dynamic && ubi write $loadaddr fit $filesize ; fi
ubi_write_recovery=ubi check recovery && env exists replacevol && ubi remove recovery ; if ubi check recovery ; then else run ubi_remove_rootfs ; ubi create recovery $filesize dynamic && ubi write $loadaddr recovery $filesize ; fi
ver=U-Boot 2024.07-OpenWrt-r27137-f51cb74473 (Aug 12 2024 - 22:48:06 +0000)
1 Like

Your ubootenv settings looks OK to me now.

Resetting to factory default via u-boot should leave OpenWrt configurations alone, i.e. untouched. It should not have touched your rootfs_data volume.

Openwrt was resetted!
Funny thing: i've again reverted the env to default by importing openwrt settings backup

The file /etc/fw_env.config is the problem, in my backup are ubi0_0+ubi0_1, and after factory reset /dev/ubi0_2+/dev/ubi0_3